FKIE_CVE-2021-47727

Vulnerability from fkie_nvd - Published: 2025-12-09 21:15 - Updated: 2026-06-17 04:18
Severity
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
References
disclosure@vulncheck.comhttps://github.com/Mbed-TLS/mbedtlsNot Applicable
disclosure@vulncheck.comhttps://www.exploit-db.com/exploits/49459Exploit, Third Party Advisory
disclosure@vulncheck.comhttps://www.selea.comProduct
disclosure@vulncheck.comhttps://www.vulncheck.com/advisories/selea-targa-ip-camera-unauthenticated-stream-disclosureThird Party Advisory
disclosure@vulncheck.comhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.phpThird Party Advisory
Impacted products
Vendor Product Version
selea izero_box_full_firmware -
selea izero_box_full -
selea izero_column_entry\/8_firmware -
selea izero_column_entry\/8 -
selea izero_column_full\/8_firmware -
selea izero_column_full\/8 -
selea targa_504_firmware -
selea targa_504 -
selea targa_512_firmware -
selea targa_512 -
selea targa_704_ilb_firmware -
selea targa_704_ilb -
selea targa_704_tkm_firmware -
selea targa_704_tkm -
selea targa_710_inox_firmware -
selea targa_710_inox -
selea targa_750_firmware -
selea targa_750 -
selea targa_805_firmware -
selea targa_805 -
selea targa_semplice_firmware -
selea targa_semplice -
selea carplateserver 3.005\(191112\)
selea carplateserver 3.005\(191206\)
selea carplateserver 3.100\(200225\)
selea carplateserver 4.013\(201105\)
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Selea Targa IP OCR-ANPR Camera",
          "vendor": "Selea s.r.l.",
          "versions": [
            {
              "status": "affected",
              "version": "Model: iZero"
            }
          ]
        }
      ],
      "source": "disclosure@vulncheck.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:izero_box_full_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BC5F782-F358-4E13-88CD-8AF6F631D136",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:izero_box_full:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8736E8B4-238F-4BB9-900A-44D34AEEA244",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:izero_column_entry\\/8_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A73F7A2-DCD9-42F1-93AE-147703747B9E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:izero_column_entry\\/8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "003FFAA4-87FC-4CA1-B0F7-A4DC1FD8F6AE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:izero_column_full\\/8_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "992C33A2-04E4-481D-A336-3850D0A823EC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:izero_column_full\\/8:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F62AF0A-B754-4DCF-A6B1-34DCEB11B090",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_504_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "55482174-E8FD-4003-BABE-A195484C79F9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_504:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FB2771E-91E8-45C7-9EB2-D84B46F6802D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_512_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C4451B5-C9EB-4A7E-8D9A-6F5AA66F43BA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_512:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "22626DE4-BB35-49C9-803B-29B6E017CA02",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_704_ilb_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E50FC5C-4F29-44F2-8A2D-5F362DE0C49C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_704_ilb:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FE47FA1-CFF3-475A-BA51-A23D37498B14",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_704_tkm_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0DA6817-4C56-4BBD-8464-2DC57AB4544A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_704_tkm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F28D701-8CB3-4A92-9E33-4D50148E1662",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_710_inox_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "465D7813-07FB-4A76-BF8E-4426DB1ED38B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_710_inox:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F5DB1C2-A03D-442A-AE10-8EE98475356C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_750_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC6357A5-A2DE-4F73-AD3E-0193A75D3E92",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_750:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4ADD09A6-2FAC-455B-8286-24DCA881267F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_805_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD03B24D-E853-4481-875A-5BC5CC440512",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_805:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2B94539-64C0-494C-9B26-8AA7B452F7A2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:selea:targa_semplice_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "92028D93-2455-4382-8A92-68DCAA06280D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:selea:targa_semplice:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EA35E66-8DD4-4105-9644-A34EFD9D1A48",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:selea:carplateserver:3.005\\(191112\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "95F75BB0-462C-4998-B4A6-7F555BFE2BD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:selea:carplateserver:3.005\\(191206\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "A859F4A9-00BD-4B7E-AAE5-CEE848FD2C4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:selea:carplateserver:3.100\\(200225\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "4A2667EB-84A6-457E-A364-5AF8392E4099",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:selea:carplateserver:4.013\\(201105\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "19269FA0-F4A3-4E25-9B5F-6511C73AE056",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage."
    }
  ],
  "id": "CVE-2021-47727",
  "lastModified": "2026-06-17T04:18:22.313",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.7,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "disclosure@vulncheck.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-47727",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-12-12T16:25:32.320882Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-12-09T21:15:51.083",
  "references": [
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Not Applicable"
      ],
      "url": "https://github.com/Mbed-TLS/mbedtls"
    },
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://www.exploit-db.com/exploits/49459"
    },
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Product"
      ],
      "url": "https://www.selea.com"
    },
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.vulncheck.com/advisories/selea-targa-ip-camera-unauthenticated-stream-disclosure"
    },
    {
      "source": "disclosure@vulncheck.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.php"
    }
  ],
  "sourceIdentifier": "disclosure@vulncheck.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ],
      "source": "disclosure@vulncheck.com",
      "type": "Secondary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.