CVE-2021-47730
High
Description
Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user visits the page.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSelea Targa 504 Firmware
PublishedDec 9, 2025
First seenDec 9, 2025
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selea targa_504_firmware | No range specified | — |
| selea izero_box_full_firmware | No range specified | — |
| selea izero_column_entry\/8_firmware | No range specified | — |
| selea izero_column_full\/8_firmware | No range specified | — |
| selea targa_512_firmware | No range specified | — |
| selea targa_704_ilb_firmware | No range specified | — |
| selea targa_704_tkm_firmware | No range specified | — |
| selea targa_710_inox_firmware | No range specified | — |
| selea targa_750_firmware | No range specified | — |
| selea targa_805_firmware | No range specified | — |
| selea targa_semplice_firmware | No range specified | — |
| selea carplateserver | 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.