Every CVE Search/ Get API key

CVE-2021-40378

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices....

8.1 HighPublic exploit

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

15.0%Up 14.6 points since Sep 2, 2021
90%50%10%1%

What each source reports

NVD Score used 8.1

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Record
CVE-2021-40378
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0
8.5 HighAV:N/AC:L/Au:S/C:N/I:C/A:C
Weakness
CWE-862
Updated
2026-11-02
CVE List No score

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Record
CVE-2021-40378
Updated
2026-11-02
EUVDEUVD-2021-27555 No score

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Record
EUVD-2021-27555
Updated
2026-11-03
GitHub AdvisoriesGHSA-3mrr-8phg-3qw7 No score

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices....

An issue was discovered on Compro IP70 2.08_7130218, IP570 2.08_7130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device.

Record
GHSA-3mrr-8phg-3qw7
Weakness
CWE-862
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBCompro Technology IP Camera - 'killps.cgi' Denial of Service (DoS)2021-09-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-40378 is a high vulnerability (CVSS 8.1) in Comprotech Ip570 Firmware, published September 1, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.0%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open