CVEvulnerability

CVE-2021-30166

7.2 HIGH Published 2021-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.

Affected configurations

• meritlilin p2r8852e2 firmware (< 7.1.94.8908) • meritlilin p2r8852e4 firmware (< 7.1.94.8908) • meritlilin p2r6852e2 firmware (< 7.1.94.8908) • meritlilin p2r6852e4 firmware (< 7.1.94.8908) • meritlilin p2r6552e2 firmware (< 7.1.94.8908) • meritlilin p2r6552e4 firmware (< 7.1.94.8908) • meritlilin p2r6352ae2 firmware (< 7.1.94.8908) • meritlilin p2r6352ae4 firmware (< 7.1.94.8908) • meritlilin p2r3052ae2 firmware (< 7.1.94.8908) • meritlilin p2g1052 firmware (< 7.1.94.8908) • meritlilin p2r8822e2 firmware (< 7.1.94.8908) • meritlilin p2r8822e4 firmware (< 7.1.94.8908) • meritlilin p2r6822e2 firmware (< 7.1.94.8908) • meritlilin p2r6822e4 firmware (< 7.1.94.8908) • meritlilin p2r6522e2 firmware (< 7.1.94.8908) • meritlilin p2r6522e4 firmware (< 7.1.94.8908) • meritlilin p2r6322ae2 firmware (< 7.1.94.8908) • meritlilin p2r6322ae4 firmware (< 7.1.94.8908) • meritlilin p2r3022ae2 firmware (< 7.1.94.8908) • meritlilin p2g1022 firmware (< 7.1.94.8908) • meritlilin p2g1022x firmware (< 7.1.94.8908) • meritlilin z2r8852ax firmware (< 7.1.94.8908) • meritlilin z2r8152x-p firmware (< 7.1.94.8908) • meritlilin z2r8152x2-p firmware (< 7.1.94.8908) • meritlilin z2r8052ex25 firmware (< 7.1.94.8908) • meritlilin z2r6552x firmware (< 7.1.94.8908) • meritlilin z2r6452ax firmware (< 7.1.94.8908) • meritlilin z2r6452ax-p firmware (< 7.1.94.8908) • meritlilin z2r8822ax firmware (< 7.1.94.8908) • meritlilin z2r8122x-p firmware (< 7.1.94.8908) • meritlilin z2r8122x2-p firmware (< 7.1.94.8908) • meritlilin z2r8022ex25 firmware (< 7.1.94.8908) • meritlilin z2r6522x firmware (< 7.1.94.8908) • meritlilin z2r6422ax firmware (< 7.1.94.8908) • meritlilin z2r6422ax-p firmware (< 7.1.94.8908) • meritlilin p3r6322e2 firmware (< 7.1.94.8908) • meritlilin p3r6522e2 firmware (< 7.1.94.8908) • meritlilin p3r8822e2 firmware (< 7.1.94.8908) • meritlilin z3r6422x3 firmware (< 7.1.94.8908) • meritlilin z3r6522x firmware (< 7.1.94.8908) • meritlilin z3r8922x3 firmware (< 7.1.94.8908)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References