CVE-2021-40380: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

Security readout for executives and security teams

Some Compro IP camera devices can disclose stored camera credentials through named CGI interfaces. If reachable by untrusted users, exposed credentials could enable unauthorized camera access or follow-on compromise. The public record does not provide a vendor patch, CVSS score, or confirmed active exploitation. Exposure is most likely in organizations still operating the listed Compro camera models or firmware builds, especially where management interfaces are reachable from corporate networks, guest networks, or the internet. Asset inventories may miss these devices if cameras are managed outside standard IT processes. Prioritize discovery and isolation of affected cameras. The main business risk is credential exposure from physical-security devices, with limited public remediation detail. Urgency is higher for internet-exposed or shared-network deployments. Mitigation focus: Identify and inventory the listed Compro camera models and firmware builds.; Restrict camera management access to trusted administrative networks only.; Change credentials on affected devices after exposure is assessed..

Prepared

Jun 2, 2026, 18:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.