CVE-2021-47727
Medium
Description
Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage.
SeverityMedium
CVSS5.3
Exploit probability—
ProductSelea Targa 504 Firmware
PublishedDec 9, 2025
First seenDec 9, 2025
Weakness typeCWE-306Missing authentication for critical function
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selea targa_504_firmware | No range specified | — |
| selea izero_box_full_firmware | No range specified | — |
| selea izero_column_entry\/8_firmware | No range specified | — |
| selea izero_column_full\/8_firmware | No range specified | — |
| selea targa_512_firmware | No range specified | — |
| selea targa_704_ilb_firmware | No range specified | — |
| selea targa_704_tkm_firmware | No range specified | — |
| selea targa_710_inox_firmware | No range specified | — |
| selea targa_750_firmware | No range specified | — |
| selea targa_805_firmware | No range specified | — |
| selea targa_semplice_firmware | No range specified | — |
| selea carplateserver | 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.