Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-30167

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

Description

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware

  • unspecified to ≤ 7.1.94.8908affected

References