CVE-2021-40379

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization...

CVE-2021-40378

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

CVE-2021-40381

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. indexMJpeg.cgi allows video access...

CVE-2021-40380

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials...

CVE-2021-40380

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials...

CVE-2021-40379

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization...

CVE-2021-40378

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

CVE-2021-40382

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2021-40381

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. indexMJpeg.cgi allows video access...

Code injection

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

Command injection

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials...

Authentication flaw

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. indexMJpeg.cgi allows video access...

Authorization

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization...

Design/Logic Flaw

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access...

CVE-2021-40379

CVE-2021-40379 affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability is an unauthenticated RTSP access issue: rstp://.../medias2 does not require authorization, enabling leakage of video streams. CONNECTED documents corroborate unauthenticated access...

CVE-2021-40379

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization...

CVE-2021-40380

The CVE-2021-40380 entry affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability arises because cameralist.cgi and setcamera.cgi disclose credentials, enabling unauthorized access to device administrator or RTSP credentials via these CGI endpoints. The...

CVE-2021-40380

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials...

CVE-2021-40381

CVE-2021-40381 affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability stems from index_MJpeg.cgi, which allows access to the camera video page, enabling unauthorized video access. Public references (including exploit mentions) corroborate unauthorized...

CVE-2021-40381

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. indexMJpeg.cgi allows video access...