Selea Targa IP Camera Cross-Site Request Forgery via Admin Creation
Priority HIGH 78CWE-352Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Tampering
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-352.
Summary
Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user visits the page.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00251 16th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Selea | Selea Targa IP OCR-ANPR Camera | Model: iZero | — | No fix listed | CNA |
- Selea Targa IP OCR-ANPR Camera VendorSelea Affected Model: iZero Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
- cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_entry\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_entry\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:izero_column_full\/8_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:izero_column_full\/8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Selea |
| cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* | 3.005(191112) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* | 3.005(191206) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* | 3.100(200225) | Vulnerable | Selea |
| cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* | 4.013(201105) | Vulnerable | Selea |
- cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Selea
- cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191112\):*:*:*:*:*:*:* Versions 3.005(191112) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.005\(191206\):*:*:*:*:*:*:* Versions 3.005(191206) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:3.100\(200225\):*:*:*:*:*:*:* Versions 3.100(200225) Vulnerable ·Selea
- cpe:2.3:a:selea:carplateserver:4.013\(201105\):*:*:*:*:*:*:* Versions 4.013(201105) Vulnerable ·Selea
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-47730
- 2026-10-03 Alias added: GHSA-g8pv-w9gq-24x8
References
More Selea Carplateserver vulnerabilities
- TI-2021-22348 Selea Targa IP Camera Developer Backdoor Configuration Overwrite CVSS 4.0CRITICAL 9.3
- TI-2021-22345 Selea Targa IP Camera Remote Code Execution via Utils CVSS 4.0CRITICAL 9.3
- TI-2021-22344 Selea Targa IP Camera Unauthenticated Stream Disclosure CVSS 4.0HIGH 8.7
- TI-2021-22346 Selea Targa IP Camera Stored Cross-Site Scripting via Files List CVSS 4.0MEDIUM 5.1
Sources
- CVE-2021-47730 · CVE Program
- CVE-2021-47730 · NVD
- FIRST EPSS
- GHSA-g8pv-w9gq-24x8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences