Vulnerability Description
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Selea | Izero Box Full Firmware | - |
| Selea | Izero Box Full | - |
| Selea | Izero Column Entry\/8 Firmware | - |
| Selea | Izero Column Entry\/8 | - |
| Selea | Izero Column Full\/8 Firmware | - |
| Selea | Izero Column Full\/8 | - |
| Selea | Targa 504 Firmware | - |
| Selea | Targa 504 | - |
| Selea | Targa 512 Firmware | - |
| Selea | Targa 512 | - |
| Selea | Targa 704 Ilb Firmware | - |
| Selea | Targa 704 Ilb | - |
| Selea | Targa 704 Tkm Firmware | - |
| Selea | Targa 704 Tkm | - |
| Selea | Targa 710 Inox Firmware | - |
| Selea | Targa 710 Inox | - |
| Selea | Targa 750 Firmware | - |
| Selea | Targa 750 | - |
| Selea | Targa 805 Firmware | - |
| Selea | Targa 805 | - |
Related Weaknesses (CWE)
References
- https://github.com/Mbed-TLS/mbedtlsNot Applicable
- https://www.exploit-db.com/exploits/49459ExploitThird Party Advisory
- https://www.selea.comProduct
- https://www.vulncheck.com/advisories/selea-targa-ip-camera-unauthenticated-streaThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.phpThird Party Advisory
FAQ
What is CVE-2021-47727?
CVE-2021-47727 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or...
How severe is CVE-2021-47727?
CVE-2021-47727 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47727?
Check the references section above for vendor advisories and patch information. Affected products include: Selea Izero Box Full Firmware, Selea Izero Box Full, Selea Izero Column Entry\/8 Firmware, Selea Izero Column Entry\/8, Selea Izero Column Full\/8 Firmware.