Approved changes feed: RSS · Atom

cpe:2.3:a:selea_s.r.l.:selea_targa_ip_ocr-anpr_camera:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSelea S.R.L. (cfbb4638-ae0c-509d-8218-8723c92f02f0)
ProductSelea Targa Ip Ocr Anpr Camera (b35ca880-8013-5ea7-b2f4-2d6e8713aa60)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47731 vulnerable 2026-06-08 05:38:07.509888 Selea Targa IP Camera Developer Backdoor Configuration Overwrite
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
Published: 2025-12-09T20:47:02.420Z
Updated: 2026-11-03T23:47:33.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47730 vulnerable 2026-06-08 05:38:07.507726 Selea Targa IP Camera Cross-Site Request Forgery via Admin Creation
Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user visits the page.
Published: 2025-12-09T20:46:29.807Z
Updated: 2026-04-07T14:05:49.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47729 vulnerable 2026-06-08 05:38:07.501920 Selea Targa IP Camera Stored Cross-Site Scripting via Files List
Selea Targa IP OCR-ANPR Camera contains a stored cross-site scripting vulnerability in the 'files_list' parameter that allows attackers to inject malicious HTML and script code. Attackers can send a POST request to /cgi-bin/get_file.php with crafted payload to execute arbitrary scripts in victim's browser session.
Published: 2025-12-09T20:45:17.210Z
Updated: 2026-04-07T14:05:47.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47727 vulnerable 2026-06-08 05:38:07.475111 Selea Targa IP Camera Unauthenticated Stream Disclosure
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
Published: 2025-12-09T20:43:48.814Z
Updated: 2026-04-07T14:05:46.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.