CVE-2021-47728

· CRITICALAnalyzed

← All CVEs

CVSS v3.1

9.8

CVSS v4.0

9.3

EPSS

2.65%

Published

Dec 9, 2025

Modified

Feb 23, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local file inclusion techniques.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-78

Affected Products (26)

selea · izero_box_full_firmwarevulnerable

selea · izero_box_full

selea · izero_column_entry\/8_firmwarevulnerable

selea · izero_column_entry\/8

selea · izero_column_full\/8_firmwarevulnerable

selea · izero_column_full\/8

selea · targa_504_firmwarevulnerable

selea · targa_504

selea · targa_512_firmwarevulnerable

selea · targa_512

selea · targa_704_ilb_firmwarevulnerable

selea · targa_704_ilb

selea · targa_704_tkm_firmwarevulnerable

selea · targa_704_tkm

selea · targa_710_inox_firmwarevulnerable

selea · targa_710_inox

selea · targa_750_firmwarevulnerable

selea · targa_750

selea · targa_805_firmwarevulnerable

selea · targa_805

selea · targa_semplice_firmwarevulnerable

selea · targa_semplice

selea · carplateservervulnerable

References (5)

https://github.com/zeroscience

Not Applicable

https://www.exploit-db.com/exploits/49460

Exploit

https://www.selea.com

Product

https://www.vulncheck.com/advisories/selea-targa-ip-camera-remote-code-execution-via-utils

Third Party Advisory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5620.php

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs