CVE-2021-47731
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - disclosure@vulncheck.com
- Published
- 2025-12-09
- Last modified
- 2026-04-07
- Weaknesses
- CWE-306
Affected products
- Carplateserver (Selea)
- Izero Box Full Firmware (Selea)
- Izero Column Entry/8 Firmware (Selea)
- Izero Column Full/8 Firmware (Selea)
- Targa 504 Firmware (Selea)
- Targa 512 Firmware (Selea)
- Targa 704 Ilb Firmware (Selea)
- Targa 704 Tkm Firmware (Selea)
- Targa 710 Inox Firmware (Selea)
- Targa 750 Firmware (Selea)
- Targa 805 Firmware (Selea)
- Targa Semplice Firmware (Selea)
- Selea Targa Ip Ocr-anpr Camera (Selea S.r.l.)
References
- https://github.com/zeroscience
- https://www.exploit-db.com/exploits/49455
- https://www.selea.com
- https://www.vulncheck.com/advisories/selea-targa-ip-camera-developer-backdoor-configuration-overwrite
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5615.php
