by Kastro
Paper/Archive/CVE-2021-30168

CVE-2021-30168

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware — MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.5.815 × 2016.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Affected

ProductAffectedFixed inSource
P2/Z2/P3/Z3 IP camera firmwareunspecified – 7.1.94.8908–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmeritlilin.com/assets/uploads/support/file/M00166-TW.pdfrefgist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3erefchtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388reftwcert.org.tw/tw/cp-132-4678-aad70-1.html