CVE-2021-40378

CVE-2021-40378 affects Compro IP70 (versions 2.08_7130218), IP570 (2.08_7130520), IP60, and TN540. The vulnerability stems from the /cgi-bin/support/killps.cgi endpoint, which can delete all data on the device when accessed after logging in, enabling a data loss condition. Public references descr...

CVE-2021-40380

The CVE-2021-40380 entry affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability arises because cameralist.cgi and setcamera.cgi disclose credentials, enabling unauthorized access to device administrator or RTSP credentials via these CGI endpoints. The...

CVE-2021-40381

CVE-2021-40381 affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability stems from index_MJpeg.cgi, which allows access to the camera video page, enabling unauthorized video access. Public references (including exploit mentions) corroborate unauthorized...

CVE-2021-40382

The CVE-2021-40382 issue affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability is in mjpegStreamer.cgi, enabling access to video screenshots from the camera. Public references (NVD/Red Hat, 0day/Exploit-DB, packetstorm) corroborate the affected model...

CVE-2021-40379

CVE-2021-40379 affects Compro IP70 (2.08_7130218), IP570 (2.08_7130520), IP60, and TN540 devices. The vulnerability is an unauthenticated RTSP access issue: rstp://.../medias2 does not require authorization, enabling leakage of video streams. CONNECTED documents corroborate unauthenticated access...