CVE-2021-47707

The record

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.

Affected packages

Related vulnerabilities

• CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-1392
• CVE-2026-65313 A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering… CWE-1392
• CVE-2026-68503 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. CWE-1392
• CVE-2026-46386 OpenProject is open-source, web-based project management software. CWE-1392
• CVE-2026-44273 Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default… CWE-1392
• CVE-2026-32652 Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials"… CWE-1392
• CVE-2026-50005 Brickcom cameras ship with default credentials that allows any unauthenticated remote… CWE-1392
• CVE-2026-9844 Use of default credentials vulnerability in Roche Diagnostics navify Digital Pathology… CWE-1392