critical9.8
CVE-2021-47731
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented pag…
Impact
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Selea | Izero Box Full Firmware | All versions |
| Selea | Izero Column Entry\/8 Firmware | All versions |
| Selea | Izero Column Full\/8 Firmware | All versions |
| Selea | Targa 504 Firmware | All versions |
| Selea | Targa 512 Firmware | All versions |
| Selea | Targa 704 Ilb Firmware | All versions |
| Selea | Targa 704 Tkm Firmware | All versions |
| Selea | Targa 710 Inox Firmware | All versions |
| Selea | Targa 750 Firmware | All versions |
| Selea | Targa 805 Firmware | All versions |
| Selea | Targa Semplice Firmware | All versions |
| Selea | Carplateserver | Versions 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) |