cbcvebase.
CVE-2021-40382
published 2021-09-01

CVE-2021-40382: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access.

PriorityP266high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
22.72%
97.4th percentile
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. mjpegStreamer.cgi allows video screenshot access.

Affected

2 ranges
VendorProductVersion rangeFixed in
comprotechip570_firmware——
comprotechip70_firmware——

Detection & IOCsextracted from sources · hover to see the quote

path/mjpegStreamer.cgi↗
  • →Unauthenticated HTTP GET request to /mjpegStreamer.cgi on Compro IP camera devices indicates exploitation of unauthorized video screenshot disclosure vulnerability. ↗
  • →Monitor for requests to /mjpegStreamer.cgi that are not preceded by any authentication flow; successful 200 responses to this endpoint from untrusted sources indicate active exploitation. ↗
  • ·Affected devices and firmware versions are Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540; detections should be scoped to these device types. ↗

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.