COMMAX Co., Ltd. Smart Home IoT Control System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting COMMAX Co., Ltd. Smart Home IoT Control System: 1 record(s), with affected versions and fixes.

CVE-2021-47708 Critical · 9.3 CWE-89 Dec 9, 2025

COMMAX Smart Home IoT Control System SQL Injection Authentication Bypass

COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with malicious 'id' values to manipulate database queries and gain unauthorized access.