cbcvebase.
CVE-2021-40379
published 2021-09-01

CVE-2021-40379: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization.

PriorityP265high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
21.63%
97.3th percentile
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. rstp://.../medias2 does not require authorization.

Affected

2 ranges
VendorProductVersion rangeFixed in
comprotechip570_firmware——
comprotechip70_firmware——

Detection & IOCsextracted from sources · hover to see the quote

urlrtsp://.../medias2↗
path/medias2↗
  • →Detect unauthenticated RTSP requests to the /medias2 endpoint on Compro IP camera devices — no Authorization header or credentials required by the device. ↗
  • →Monitor for RTSP traffic (typically TCP/554) targeting the path /medias2 without any authentication challenge/response exchange. ↗
  • ·Affected device models and firmware versions are Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 — detections should be scoped to these devices where asset inventory is available. ↗

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.