CVE-2021-47707
CriticalSummary
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.
Risk Assessment
The risk for the organization is unauthorized access to the surveillance system, which can lead to privacy and security breaches.
Recommendation
It is recommended to immediately change default passwords and restrict access to the device to trusted networks only.
Original NVD description (English source)
COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.