CVE-2021-40382: An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices.

Security readout for executives and security teams

CVE-2021-40382 describes screenshot disclosure on specific Compro IP camera devices. The reported issue is that mjpegStreamer.cgi can allow access to video screenshots, which may expose live surveillance imagery or sensitive locations. The source bundle does not include CVSS, vendor remediation, or proof of active exploitation. Exposure is most relevant where affected Compro cameras are reachable from untrusted networks, especially internet-facing or shared networks. Internal-only cameras still matter if guest, contractor, or compromised systems can reach the camera interface. Treat this as a privacy and physical-security exposure issue. Prioritize discovery and network containment for any internet-facing or sensitive-site cameras, while confirming whether vendor-supported remediation exists. Mitigation focus: Identify affected Compro camera models and firmware versions in asset inventory.; Remove direct internet exposure for affected camera interfaces.; Restrict camera access to trusted management networks or VPNs..

Prepared

Jun 2, 2026, 18:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.