Approved changes feed: RSS · Atom

cpe:2.3:a:commax_co.,_ltd.:smart_home_iot_control_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCommax Co., Ltd. (9614182f-dc54-5bb7-b9d1-d1caa335b0ac)
ProductSmart Home Iot Control System (e5f0697a-6aab-5922-8cb0-7f53bf8fc30a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47708 vulnerable 2026-06-08 05:38:07.441628 COMMAX Smart Home IoT Control System SQL Injection Authentication Bypass
COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the 'id' parameter in 'loginstart.asp'. Attackers can exploit this by sending a POST request with malicious 'id' values to manipulate database queries and gain unauthorized access.
Published: 2025-12-09T20:39:33.372Z
Updated: 2026-07-15T01:24:34.159Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.