Biometric Access Control System CVEs and Security Vulnerabilities

CVE-2021-47706

COMMAX Biometric Access Control System Authentication Bypass

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Commax

Products

Biometric Access Control System

CVE-2021-47743

COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed