Vulnerabilities > CVE-2021-40380 - Unspecified vulnerability in Comprotech products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

comprotech

NVD

Published: 2021-09-01

Updated: 2024-11-21

Summary

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials.

Vulnerable Configurations

Part	Description	Count
OS	Comprotech Comprotech Ip70 Firmware 2.08_7130218 Comprotech Ip570 Firmware 2.08_7130520 Comprotech Ip60 Firmware - Comprotech Tn540 Firmware -	4
Hardware	Comprotech Comprotech Ip70 * Comprotech Ip570 * Comprotech Ip60 * Comprotech Tn540 *	4

References

http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
http://packetstormsecurity.com/files/164027/Compro-Technology-IP-Camera-Credential-Disclosure.html
https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md