Vulnerability Details CVE-2021-40379
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.355
EPSS Ranking 97.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
- http://packetstormsecurity.com/files/164026/Compro-Technology-IP-Camera-RTSP-Stream-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
Products affected by CVE-2021-40379
-
cpe:2.3:h:comprotech:ip570:*
-
cpe:2.3:h:comprotech:ip60:*
-
cpe:2.3:h:comprotech:ip70:*
-
cpe:2.3:h:comprotech:tn540:*
-
cpe:2.3:o:comprotech:ip570_firmware:2.08_7130520
-
cpe:2.3:o:comprotech:ip60_firmware:-
-
cpe:2.3:o:comprotech:ip70_firmware:2.08_7130218
-
cpe:2.3:o:comprotech:tn540_firmware:-