high7.5Public exploit code
CVE-2021-40380
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Compro Technology IP Camera - 'Multiple' Credential Disclosure2021-09-02 · webapps · hardware
Impact
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comprotech | Ip70 Firmware | Version 2.08_7130218 |
| Comprotech | Ip570 Firmware | Version 2.08_7130520 |
| Comprotech | Ip60 Firmware | All versions |
| Comprotech | Tn540 Firmware | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
- http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md