Security Advisory
CVE-2021-47708
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authentication by injecting arbitrary SQL code through the id parameter in loginstart.asp. Attackers can exploit this by sending a POST request with malicious id values to manipulate database queries and gain unauthorized access.