Vulnerability Description
Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user visits the page.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Selea | Izero Box Full Firmware | - |
| Selea | Izero Box Full | - |
| Selea | Izero Column Entry\/8 Firmware | - |
| Selea | Izero Column Entry\/8 | - |
| Selea | Izero Column Full\/8 Firmware | - |
| Selea | Izero Column Full\/8 | - |
| Selea | Targa 504 Firmware | - |
| Selea | Targa 504 | - |
| Selea | Targa 512 Firmware | - |
| Selea | Targa 512 | - |
| Selea | Targa 704 Ilb Firmware | - |
| Selea | Targa 704 Ilb | - |
| Selea | Targa 704 Tkm Firmware | - |
| Selea | Targa 704 Tkm | - |
| Selea | Targa 710 Inox Firmware | - |
| Selea | Targa 710 Inox | - |
| Selea | Targa 750 Firmware | - |
| Selea | Targa 750 | - |
| Selea | Targa 805 Firmware | - |
| Selea | Targa 805 | - |
Related Weaknesses (CWE)
References
- https://github.com/zeroscienceNot Applicable
- https://www.exploit-db.com/exploits/49458Exploit
- https://www.selea.comProduct
- https://www.vulncheck.com/advisories/selea-targa-ip-camera-cross-site-request-foThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5618.phpThird Party Advisory
FAQ
What is CVE-2021-47730?
CVE-2021-47730 is a vulnerability with a CVSS score of 8.8 (HIGH). Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page...
How severe is CVE-2021-47730?
CVE-2021-47730 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47730?
Check the references section above for vendor advisories and patch information. Affected products include: Selea Izero Box Full Firmware, Selea Izero Box Full, Selea Izero Column Entry\/8 Firmware, Selea Izero Column Entry\/8, Selea Izero Column Full\/8 Firmware.