Description
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware
unspecified to ≤ 7.1.94.8908affected