CVE-2025-34022Selea Targa IP OCR-ANPR Camera Path Traversal
- 9.3CriticalCVSS base score
- 0.79%Exploitation in 30 daysEPSS · top 43% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- YesPublic exploitsa reference or SSVC says so
Description
A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/get_file.php script in the “Download Archive in Storage” page fails to properly validate user-supplied input to the file parameter. Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files containing cleartext credentials, potentially leading to authentication bypass and exposure of system information. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.
Public exploit
An exploit or proof of concept is public: anyone can try it against an unpatched system. 4 references of the record are tagged as an exploit. CISA's SSVC rates its exploitation: a proof of concept is public.
Show the exploits4
References tagged exploit4 references
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5616.php (opens in a new tab)third-party-advisoryexploit
- https://packetstorm.news/files/id/161057 (opens in a new tab)third-party-advisoryexploit
- https://cxsecurity.com/issue/WLB-2021010165 (opens in a new tab)third-party-advisoryexploit
- https://www.exploit-db.com/exploits/49456 (opens in a new tab)third-party-advisoryexploit
Timeline
ID reserved
By VulnCheck
- 2 months later
· 2 months later
Published
- 10 months later
· 10 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| VulnCheckCNA (assigner) | 4.0 | Critical9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H |
| NVDNVD · Deferred | 4.0 | Critical9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.79% · top 43% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: poc · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.3.
Affected products
Selea · Targa IP OCR-ANPR Camera
- affected BLD201113005214
- affected BLD201106163745
- affected BLD200304170901
- affected BLD200304170514
- affected BLD200303143345
- affected BLD191118145435
- affected BLD191021180140
- affected CPS 4.013(201105)
- affected CPS 3.100(200225)
- affected CPS 3.005(191206)
- affected CPS 3.005(191112)
References
References6
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5616.php (opens in a new tab)third-party-advisoryexploit
- https://packetstorm.news/files/id/161057 (opens in a new tab)third-party-advisoryexploit
- https://cxsecurity.com/issue/WLB-2021010165 (opens in a new tab)third-party-advisoryexploit
- https://www.exploit-db.com/exploits/49456 (opens in a new tab)third-party-advisoryexploit
- https://www.selea.com (opens in a new tab)product
- https://vulncheck.com/advisories/selea-targa-ip-camera-path-traversal (opens in a new tab)third-party-advisory
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-18778 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-34022)Record last updated .