CVE-2021-47728CWE-78

Selea Targa IP Camera Remote Code Execution via Utils

Critical · published December 9, 2025

CVSS v4.0

9.3

EPSS

Percentile

85.3

In the wild

Unconfirmed

What it is

Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local file inclusion techniques.

The record

Technical detail

CVSS v4.0: 9.3 · CRITICAL
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.02616 · 85.3th percentile
Weakness: CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: 2025-12-09T20:44Z

EPSS history

Timeline

09 DEC 20:44Z
Selea Targa IP Camera Remote Code Execution via Utils
cvelistv5