CVE-2021-47710 COMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure
Unauthenticated attackers can retrieve plain-text RTSP credentials and DVR settings from the COMMAX Smart Home Ruvie CCTV Bridge via a specific endpoint.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-47710?
CVE-2021-47710 is a high-severity vulnerability in COMMAX Co., Ltd. Smart Home Ruvie CCTV Bridge DVR Service, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentials in plain-text by exploiting the /overview.asp endpoint. Attackers can access sensitive information, including login credentials and DVR settings, by submitting a GET request to this endpoint.
Weakness: CWE-306
Which versions are affected by CVE-2021-47710?
How do I fix CVE-2021-47710?
No fix has been published for CVE-2021-47710 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-47710 being exploited?
There is no known exploitation of CVE-2021-47710 in the wild and no public exploit code.
Sources
Also known as GHSA-cx3r-78v3-hh67.