Description
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Selea s.r.l. | Selea Targa IP OCR-ANPR Camera | Model: iZero | — |
References
- ExploitDB-49455 exploit
- Selea s.r.l. Product Web Page product
- Zero Science Lab Disclosure (ZSL-2021-5615) third-party-advisory
- Zero Science GitHub Repository product
- VulnCheck Advisory: Selea Targa IP Camera Developer Backdoor Configuration Overwrite third-party-advisory