CVE-2021-47727
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
- Score
- CVSS 4.0 8.7 High
- Status
- Analyzed - disclosure@vulncheck.com
- Published
- 2025-12-09
- Last modified
- 2026-04-07
- Weaknesses
- CWE-306
Affected products
- Carplateserver (Selea)
- Izero Box Full Firmware (Selea)
- Izero Column Entry/8 Firmware (Selea)
- Izero Column Full/8 Firmware (Selea)
- Targa 504 Firmware (Selea)
- Targa 512 Firmware (Selea)
- Targa 704 Ilb Firmware (Selea)
- Targa 704 Tkm Firmware (Selea)
- Targa 710 Inox Firmware (Selea)
- Targa 750 Firmware (Selea)
- Targa 805 Firmware (Selea)
- Targa Semplice Firmware (Selea)
- Selea Targa Ip Ocr-anpr Camera (Selea S.r.l.)
References
- https://github.com/Mbed-TLS/mbedtls
- https://www.exploit-db.com/exploits/49459
- https://www.selea.com
- https://www.vulncheck.com/advisories/selea-targa-ip-camera-unauthenticated-stream-disclosure
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.php
