This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2021-47710 | BDVDB-2026-304457 Detail

COMMAXSmart Home Ruvie CCTV Bridge DVR Service

Description#

COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request to this endpoint.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.