Commax Biometric Access Control System

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:commax_co.,_ltd.:commax_biometric_access_control_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCommax Co., Ltd. (9614182f-dc54-5bb7-b9d1-d1caa335b0ac)
ProductCommax Biometric Access Control System (3087a4a5-4bd8-5356-91c2-26bbf10c39b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47743 vulnerable 2026-06-08 05:38:07.558808 COMMAX Biometric Access Control System 1.0.0 Reflected XSS via Cookie Parameters
MEDIUM (6.1)
COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.
Published: 2025-12-31T18:40:54.727Z
Updated: 2026-05-24T01:37:01.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47706 vulnerable 2026-06-08 05:38:07.439324 COMMAX Biometric Access Control System Authentication Bypass
COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.
Published: 2025-12-09T20:37:44.232Z
Updated: 2026-04-07T14:05:34.150Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.