Vulnerabilidades do COMMAX Co., Ltd. COMMAX Biometric Access Control System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam COMMAX Co., Ltd. COMMAX Biometric Access Control System: 2 registro(s), com versões afetadas e correções.
CVE-2021-47743
Média · 6.1
CWE-79 31/12/2025
COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters
COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.
CVE-2021-47706
Alta · 8.7
CWE-565 09/12/2025
COMMAX Biometric Access Control System Authentication Bypass
COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.