Vulnerability · Published Dec 9, 2025 · Assigned by VulnCheck

CVE-2021-47706COMMAX Biometric Access Control System Authentication Bypass

High 8.7

In plain English

A high-severity security flaw in COMMAX Biometric Access Control System from COMMAX Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.6%top 53.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access sensitive information and circumvent physical controls in smart homes and buildings by exploiting cookie poisoning. Attackers can forge cookies to bypass authentication and disclose sensitive information.

Affected products (as reported)

Vendor	Product	Versions
COMMAX Co., Ltd.	COMMAX Biometric Access Control System	1.0.0

Weakness: CWE-565 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

ExploitDB-50206 exploit
Official Product Homepage product
Zero Science Lab Disclosure (ZSL-2021-5661) third-party-advisory
COMMAX Biometric Access Control System 1.0.0 Product Page product
VulnCheck Advisory: COMMAX Biometric Access Control System Authentication Bypass third-party-advisory