CVE-2025-34022

A path traversal vulnerability exists in multiple models of Selea Targa IP OCR-ANPR cameras, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB. The /common/get_file.php script in the “Download Archive in Storage” page fails to properly validate user-supplied input to the file parameter. Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files on the device, including sensitive system files containing cleartext credentials, potentially leading to authentication bypass and exposure of system information. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.

• CWE-22

• https://cxsecurity.com/issue/WLB-2021010165
• https://packetstorm.news/files/id/161057
• https://vulncheck.com/advisories/selea-targa-ip-camera-path-traversal
• https://www.exploit-db.com/exploits/49456
• https://www.selea.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5616.php

Published

Jun 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3398A vulnerability classified as critical was found in lenve VB…9.8
• CVE-2025-3399A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-3400A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-3401A vulnerability has been found in ESAFENET CDG 5.6.3.154.205…9.8
• CVE-2025-3402A vulnerability was found in Seeyon Zhiyuan Interconnect FE …7.5
• CVE-2025-34021A server-side request forgery (SSRF) vulnerability exists in…7.8
• CVE-2025-34023A path traversal vulnerability exists in the Karel IP1211 IP…8.5
• CVE-2025-34024An OS command injection vulnerability exists in the Edimax E…8.8
• CVE-2025-34025The Versa Concerto SD-WAN orchestration platform is vulnerab…8.6
• CVE-2025-34026The Versa Concerto SD-WAN orchestration platform is vulnerab…7.5
• CVE-2025-34027The Versa Concerto SD-WAN orchestration platform is vulnerab…10
• CVE-2025-34028The Commvault Command Center Innovation Release allows an un…10