CVE-2025-34021

A server-side request forgery (SSRF) vulnerability exists in multiple Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The application fails to validate user-supplied input in JSON POST parameters such as ipnotify_address and url, which are used by internal mechanisms to perform image fetch and DNS lookups. This allows remote unauthenticated attackers to induce the system to make arbitrary HTTP requests to internal or external systems, potentially bypassing firewall policies or conducting internal service enumeration. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.

• CWE-20
• CWE-918

• https://cxsecurity.com/issue/WLB-2021010170
• https://packetstorm.news/files/id/161059
• https://vulncheck.com/advisories/selea-targa-ip-camera-ssrf
• https://www.exploit-db.com/exploits/49457
• https://www.selea.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5617.php

Published

Jun 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3397A vulnerability classified as problematic has been found in …6.1
• CVE-2025-3398A vulnerability classified as critical was found in lenve VB…9.8
• CVE-2025-3399A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-3400A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-3401A vulnerability has been found in ESAFENET CDG 5.6.3.154.205…9.8
• CVE-2025-3402A vulnerability was found in Seeyon Zhiyuan Interconnect FE …7.5
• CVE-2025-34022A path traversal vulnerability exists in multiple models of …9.3
• CVE-2025-34023A path traversal vulnerability exists in the Karel IP1211 IP…8.5
• CVE-2025-34024An OS command injection vulnerability exists in the Edimax E…8.8
• CVE-2025-34025The Versa Concerto SD-WAN orchestration platform is vulnerab…8.6
• CVE-2025-34026The Versa Concerto SD-WAN orchestration platform is vulnerab…7.5
• CVE-2025-34027The Versa Concerto SD-WAN orchestration platform is vulnerab…10