---
id: CVE-2021-47731
title: Selea Targa IP Camera Developer Backdoor Configuration Overwrite
summary: >-
  Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password
  vulnerability that allows unauthorized configuration access through an
  undocumented page. Attackers can exploit the hidden endpoint by using the
  hard-coded password …
severity: critical
cvss: 9.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-306
vendor: Selea s.r.l.
product: Selea Targa IP OCR-ANPR Camera
affected:
  - 'selea_targa_ip_ocr-anpr_camera Model: iZero'
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2025-12-10T16:48:25.722853Z'
exploitAvailable: true
published: '2025-12-09'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T23:47:33.005Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2021-47731'
references:
  - url: 'https://www.exploit-db.com/exploits/49455'
    label: ExploitDB-49455
  - url: 'https://www.selea.com'
    label: Selea s.r.l. Product Web Page
  - url: 'https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5615.php'
    label: Zero Science Lab Disclosure (ZSL-2021-5615)
  - url: 'https://github.com/zeroscience'
    label: Zero Science GitHub Repository
  - url: >-
      https://www.vulncheck.com/advisories/selea-targa-ip-camera-developer-backdoor-configuration-overwrite
    label: >-
      VulnCheck Advisory: Selea Targa IP Camera Developer Backdoor Configuration
      Overwrite
tags:
  - cve.org
  - exploit-available
epss: 0.00519
epssPercentile: 0.44334
ingestedAt: '2026-11-05T20:33:06.624Z'
---

## Overview

Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.

## Affected

- `selea_targa_ip_ocr-anpr_camera Model: iZero`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
