Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-40381. PoCs published by icekam.
AI-analyzed exploit summary This exploit describes an unauthorized access vulnerability in Compro Technology IP cameras, allowing access to the camera video stream via a specific CGI endpoint without authentication.
Description
An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. index_MJpeg.cgi allows video access.
Exploits (1)
exploitdb
WRITEUP
by icekam · textwebappshardware
https://www.exploit-db.com/exploits/50253
This exploit describes an unauthorized access vulnerability in Compro Technology IP cameras, allowing access to the camera video stream via a specific CGI endpoint without authentication.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, TN540
No auth needed
Prerequisites:
Network access to the target camera
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (2)
Core 2
Core References
Broken Link x_refsource_misc
https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/164031/Compro-Technology-IP-Camera-Stream-Disclosure.html
Scores
CVSS v3
7.5
EPSS
0.2272
EPSS Percentile
97.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
Status
published
Products (4)
comprotech/ip570_firmware
2.08_7130520
comprotech/ip60_firmware
comprotech/ip70_firmware
2.08_7130218
comprotech/tn540_firmware
Published
Sep 01, 2021
Tracked Since
Feb 18, 2026