CVE-2021-40380

HIGH

Compro IP70 IP570 IP60 TN540 Firmware - Credential Disclosure via cameralist.cgi and setcamera.cgi

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-40380. PoCs published by icekam.

AI-analyzed exploit summary This exploit describes an unauthorized access vulnerability in Compro Technology IP cameras, allowing disclosure of administrator and RTSP credentials via specific CGI endpoints. No executable code is provided, only URLs and references to external documentation.

Description

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. cameralist.cgi and setcamera.cgi disclose credentials.

Exploits (1)

exploitdb WRITEUP
by icekam · textwebappshardware
https://www.exploit-db.com/exploits/50252

This exploit describes an unauthorized access vulnerability in Compro Technology IP cameras, allowing disclosure of administrator and RTSP credentials via specific CGI endpoints. No executable code is provided, only URLs and references to external documentation.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, TN540
No auth needed
Prerequisites: Network access to the vulnerable camera
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.2272
EPSS Percentile 97.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (4)
comprotech/ip570_firmware 2.08_7130520
comprotech/ip60_firmware
comprotech/ip70_firmware 2.08_7130218
comprotech/tn540_firmware
Published Sep 01, 2021
Tracked Since Feb 18, 2026