CVE-2021-47731
Critical
Description
Selea Targa IP OCR-ANPR Camera contains a hard-coded developer password vulnerability that allows unauthorized configuration access through an undocumented page. Attackers can exploit the hidden endpoint by using the hard-coded password 'Selea781830' to enable configuration upload and overwrite device settings.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSelea Targa 504 Firmware
PublishedDec 9, 2025
First seenDec 9, 2025
Weakness typeCWE-306Missing authentication for critical function
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| selea targa_504_firmware | No range specified | — |
| selea izero_box_full_firmware | No range specified | — |
| selea izero_column_entry\/8_firmware | No range specified | — |
| selea izero_column_full\/8_firmware | No range specified | — |
| selea targa_512_firmware | No range specified | — |
| selea targa_704_ilb_firmware | No range specified | — |
| selea targa_704_tkm_firmware | No range specified | — |
| selea targa_710_inox_firmware | No range specified | — |
| selea targa_750_firmware | No range specified | — |
| selea targa_805_firmware | No range specified | — |
| selea targa_semplice_firmware | No range specified | — |
| selea carplateserver | 3.005\(191112\), 3.005\(191206\), 3.100\(200225\), 4.013\(201105\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.