COMMAX Biometric Access Control System 1.0.0 Cookie Reflected XSS

Summary Biometric access control system. Description The application is vulnerable to an unauthenticated reflected cross-site scripting XSS vulnerability. Input passed to the Cookies 'CMXADMINNM' and 'CMXCOMPLEXNM' is not properly sanitised before being returned to the user. This can be exploited...

COMMAX Smart Home IoT Control System CDP-1020n SQL Injection Authentication Bypass

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The application suffers from an SQL Injection vulnerability. Input passed through the 'id' POST parameter in 'loginstart.asp' is not properly...

COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure

Summary COMMAX Smart Home System is a smart IoT home solution for a large apartment complex that provides advanced life values and safety. Description The COMMAX CCTV Bridge for the DVR service allows an unauthenticated attacker to disclose RTSP credentials in plain-text. COMMAX Smart Home Ruvie...

COMMAX WallPad Input Validation Error Vulnerability

COMMAX WallPad is a smart home control panel from COMMAX Korea. An input validation error vulnerability exists in the COMMAX WallPad CDP-1020MB version prior to 2019.12.30. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2019-19163

A Vulnerability in the firmware of COMMAX WallPadCDP-1020MB allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL...

Design/Logic Flaw

A Vulnerability in the firmware of COMMAX WallPadCDP-1020MB allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL...

CVE-2019-19163 Commax WallPad Remote Code Execution Vulnerability

A Vulnerability in the firmware of COMMAX WallPadCDP-1020MB allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL...

CVE-2019-19163

CVE-2019-19163 affects the COMMAX WallPad CDP-1020MB firmware. The vulnerability arises from an outdated MySQL version inside the device, enabling an unauthenticated adjacent attacker to execute arbitrary code. The documents describe the affected product and the root cause but do not provide expl...

PT-2020-10068

Name of the Vulnerable Software and Affected Versions COMMAX WallPadCDP-1020MB affected versions not specified Description A vulnerability in the firmware of COMMAX WallPadCDP-1020MB allows an unauthenticated adjacent attacker to execute arbitrary code due to the use of an old version of MySQL...

CVE-2019-19163: Improper Input Validation

A Vulnerability in the firmware of COMMAX WallPadCDP-1020MB allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL...