CP Plus vulnerabilities
We track 5 vulnerabilities in CP Plus products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
Latest CP Plus vulnerabilities
- 8.7 High severity
CP-XR-DE21-S Router: Use of Hard-coded Credentials
This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local netwo
- 8.7 High severity
EZ-P21 IP Camera: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation o
- 7.0 High severity
EZ-P21 IP Camera: Active Debug Code
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution throug
- 8.4 High severity
CP-UNR-108F1 Hardware: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on th
- 8.6 High severity
CP-XR-DE21-S Router: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Succe