CVE-2021-40378: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

Security readout for executives and security teams

CVE-2021-40378 describes a destructive flaw in several Compro IP camera devices where a support CGI endpoint can delete all device data. For executives, the business concern is loss of camera availability and configuration, not confirmed data theft. Public sources do not provide a CVSS score, vendor fix, or evidence of active exploitation. Exposure is likely limited to organizations running the named Compro camera models, especially where camera web management interfaces are reachable from untrusted networks. Internet-facing or flat internal deployments would raise urgency. Evidence is incomplete because official affected-product metadata is sparse. Prioritize discovery and isolation if these cameras support physical security, operations, or regulated environments. The vulnerability can disable devices by deleting data, but the available evidence does not confirm broad exploitation or a vendor fix. Mitigation focus: Inventory Compro IP70, IP570, IP60, and TN540 devices and firmware versions.; Check Compro or reseller guidance for patched firmware or replacement recommendations.; Remove camera management interfaces from internet exposure..

Prepared

Jun 2, 2026, 18:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.