Vulnerability Details CVE-2021-40380
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.35
EPSS Ranking 96.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
- http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
- https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
Products affected by CVE-2021-40380
-
cpe:2.3:h:comprotech:ip570:*
-
cpe:2.3:h:comprotech:ip60:*
-
cpe:2.3:h:comprotech:ip70:*
-
cpe:2.3:h:comprotech:tn540:*
-
cpe:2.3:o:comprotech:ip570_firmware:2.08_7130520
-
cpe:2.3:o:comprotech:ip60_firmware:-
-
cpe:2.3:o:comprotech:ip70_firmware:2.08_7130218
-
cpe:2.3:o:comprotech:tn540_firmware:-