Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2021-47706

COMMAX Biometric Access Control System Authentication Bypass

Description

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

COMMAX Co., Ltd. COMMAX Biometric Access Control System

Default version status: unaffected

  • 1.0.0affected

References