CVE-2021-47710 - COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure

Back Back to CVE browser

HIGH

COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure

Published Dec 9, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.35%

Description

COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request to this endpoint.

Affected products

Vendor COMMAX Co., Ltd. Product Smart Home Ruvie CCTV Bridge DVR Service Default
unaffected

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

COMMAX Co., Ltd.

Smart Home Ruvie CCTV Bridge DVR Service

unaffected

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34729
Advisory
https://www.commax.com
product
https://www.exploit-db.com/exploits/50208
exploit
https://www.vulncheck.com/advisories/commax-smart-home-ruvie-cctv-bridge-dvr-service-rtsp-credentials-disclosure
third-party-advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5665.php
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-34729		Advisory
https://www.commax.com		product
https://www.exploit-db.com/exploits/50208		exploit
https://www.vulncheck.com/advisories/commax-smart-home-ruvie-cctv-bridge-dvr-service-rtsp-credentials-disclosure		third-party-advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5665.php		third-party-advisory