What’s Vulnerable › Vulnerabilities

CVE-2021-40378

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-01 · updated 2026-06-17
• Weakness: CWE-862

Description

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Affected products

• Comprotech Ip570 Firmware: 2.08_7130520
• Comprotech Ip60 Firmware: all versions
• Comprotech Ip70 Firmware: 2.08_7130218
• Comprotech Tn540 Firmware: all versions

References

• http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html
• https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md
• http://packetstormsecurity.com/files/164024/Compro-Technology-IP-Camera-Denial-Of-Service.html
• https://github.com/icekam/0day/blob/main/Compro-Technology-Camera-has-multiple-vulnerabilities.md

Get alerted when CVE-2021-40378 or the next vulnerability affects your stack