medium5.3
CVE-2021-47727
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication.
Impact
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Selea | Izero Box Full Firmware | All versions |
| Selea | Izero Column Entry\/8 Firmware | All versions |
| Selea | Izero Column Full\/8 Firmware | All versions |
| Selea | Targa 504 Firmware | All versions |
| Selea | Targa 512 Firmware | All versions |
| Selea | Targa 704 Ilb Firmware | All versions |
| Selea | Targa 704 Tkm Firmware | All versions |
| Selea | Targa 710 Inox Firmware | All versions |
| Selea | Targa 750 Firmware | All versions |
| Selea | Targa 805 Firmware | All versions |
| Selea | Targa Semplice Firmware | All versions |
| Selea | Carplateserver | Versions 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) |