CVE-2021-47728
9.8
CRITICAL · CVSS 3.1 · EPSS 2.6% (pctl 85)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local file inclusion techniques.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.62% — more likely to be exploited than 85% of all CVEs |
| Weakness | CWE-78 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2025-12-09 |
| Last modified | 2026-06-17 |
Affected (23)
| Vendor | Product |
|---|---|
| selea | carplateserver |
| selea | izero box full |
| selea | izero box full firmware |
| selea | izero column entry\/8 |
| selea | izero column entry\/8 firmware |
| selea | izero column full\/8 |
| selea | izero column full\/8 firmware |
| selea | targa 504 |
| selea | targa 504 firmware |
| selea | targa 512 |
| selea | targa 512 firmware |
| selea | targa 704 ilb |
| selea | targa 704 ilb firmware |
| selea | targa 704 tkm |
| selea | targa 704 tkm firmware |
| selea | targa 710 inox |
| selea | targa 710 inox firmware |
| selea | targa 750 |
| selea | targa 750 firmware |
| selea | targa 805 |
| selea | targa 805 firmware |
| selea | targa semplice |
| selea | targa semplice firmware |
References
→ the Explorer · watch your stack · NVD