Selea Targa IP Camera Unauthenticated Stream Disclosure
Priority HIGH 77CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00472 41st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Selea | Selea Targa IP OCR-ANPR Camera | Model: iZero | — | No fix listed | CNA |
- Selea Targa IP OCR-ANPR Camera VendorSelea Affected Model: iZero Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
- cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* | 3.005(191112) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* | 3.005(191206) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* | 3.100(200225) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* | 4.013(201105) | Vulnerable | Selea |
- cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* Versions 3.005(191112) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* Versions 3.005(191206) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* Versions 3.100(200225) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* Versions 4.013(201105) Vulnerable ·Selea
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-47727
- 2026-10-03 Alias added: GHSA-mrj4-3c4j-jh3r
References
More Selea Carplateserver vulnerabilities
- TI-2021-22348 Selea Targa IP Camera Developer Backdoor Configuration Overwrite CVSS 4.0CRITICAL 9.3
- TI-2021-22345 Selea Targa IP Camera Remote Code Execution via Utils CVSS 4.0CRITICAL 9.3
- TI-2021-22347 Selea Targa IP Camera Cross-Site Request Forgery via Admin Creation CVSS 4.0HIGH 8.5
- TI-2021-22346 Selea Targa IP Camera Stored Cross-Site Scripting via Files List CVSS 4.0MEDIUM 5.1
Sources
- CVE-2021-47727 · CVE Program
- CVE-2021-47727 · NVD
- FIRST EPSS
- GHSA-mrj4-3c4j-jh3r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences