Vulnerability · Published Dec 9, 2025 · Assigned by VulnCheck
CVE-2021-47728Selea Targa IP Camera Remote Code Execution via Utils
Critical 9.3
In plain English
A critical-severity OS command injection in Selea Targa IP OCR-ANPR Camera from Selea. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 86% of all known vulnerabilities).
Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)2.6%top 14.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Selea Targa IP OCR-ANPR Camera contains an unauthenticated command injection vulnerability in utils.php that allows remote attackers to execute arbitrary shell commands. Attackers can exploit the 'addr' and 'port' parameters to inject commands and gain www-data user access through chained local file inclusion techniques.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Selea | Selea Targa IP OCR-ANPR Camera | Unknown |
Weakness: CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- ExploitDB-49460 exploit
- Selea Homepage product
- Zero Science Lab Disclosure (ZSL-2021-5620) third-party-advisory
- Zero Science GitHub Repository product
- VulnCheck Advisory: Selea Targa IP Camera Remote Code Execution via Utils third-party-advisory