high7.5Public exploit code
CVE-2021-40379
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated)2021-09-02 · webapps · hardware
Impact
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comprotech | Ip70 Firmware | Version 2.08_7130218 |
| Comprotech | Ip570 Firmware | Version 2.08_7130520 |
| Comprotech | Ip60 Firmware | All versions |
| Comprotech | Tn540 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
- http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md