What’s Vulnerable › Vulnerabilities
CVE-2021-47709: COMMAX Smart Home Ruvie CCTV Bridge DVR Service Config Write / DoS
- Severity: high (CVSS 8.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-09 · updated 2026-06-17
- Weakness: CWE-306
Description
COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through the setconf endpoint. Attackers can trigger a denial-of-service scenario by sending a malformed request to the setconf endpoint.
Affected products
References
- https://www.commax.com
- https://www.exploit-db.com/exploits/50209
- https://www.vulncheck.com/advisories/commax-smart-home-ruvie-cctv-bridge-dvr-service-config-write-dos
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5666.php
Get alerted when CVE-2021-47709 or the next vulnerability affects your stack