Description
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Selea s.r.l. | Selea Targa IP OCR-ANPR Camera | Model: iZero | — |
References
- ExploitDB-49459 exploit
- Selea s.r.l. Product Homepage product
- Zero Science Lab Disclosure (ZSL-2021-5619) third-party-advisory
- Mbed TLS GitHub Repository product
- VulnCheck Advisory: Selea Targa IP Camera Unauthenticated Stream Disclosure third-party-advisory