{"id":"CVE-2021-47731","title":"Selea Targa IP Camera Developer Backdoor Configuration Overwrite","summary":"Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password …","severity":"critical","cvss":9.3,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-306"],"vendor":"Selea s.r.l.","product":"Selea Targa IP OCR-ANPR Camera","affected":["selea_targa_ip_ocr-anpr_camera Model: iZero"],"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2025-12-10T16:48:25.722853Z"},"exploitAvailable":true,"published":"2025-12-09","updated":"2026-11-03","sourceUpdated":"2026-11-03T23:47:33.005Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-47731","references":[{"url":"https://www.exploit-db.com/exploits/49455","label":"ExploitDB-49455"},{"url":"https://www.selea.com","label":"Selea s.r.l. Product Web Page"},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5615.php","label":"Zero Science Lab Disclosure (ZSL-2021-5615)"},{"url":"https://github.com/zeroscience","label":"Zero Science GitHub Repository"},{"url":"https://www.vulncheck.com/advisories/selea-targa-ip-camera-developer-backdoor-configuration-overwrite","label":"VulnCheck Advisory: Selea Targa IP Camera Developer Backdoor Configuration Overwrite"}],"tags":["cve.org","exploit-available"],"epss":0.00519,"epssPercentile":0.44334,"ingestedAt":"2026-11-05T20:33:06.624Z","slug":"CVE-2021-47731","body":"## Overview\n\nSelea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.\n\n## Affected\n\n- `selea_targa_ip_ocr-anpr_camera Model: iZero`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":63,"depthScoreParts":{"impact":51.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}