Description
Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Merit LILIN DH032
Default version status: unaffected
0 to ≤ 1.0.28.3858affected
Merit LILIN DVR708
Default version status: unaffected
0 to ≤ 1.3.4affected
Merit LILIN DVR716
Default version status: unaffected
0 to ≤ 1.3.4affected
Merit LILIN DVR804
Default version status: unaffected
0 to ≤ 1.3.4affected
Merit LILIN DVR808
Default version status: unaffected
0 to ≤ 1.3.4affected
Merit LILIN DVR816
Default version status: unaffected
0 to ≤ 1.3.4affected
Merit LILIN NVR100L
Default version status: unaffected
0 to ≤ 1.1.66affected
Merit LILIN NVR200L
Default version status: unaffected
0 to ≤ 1.1.66affected
Merit LILIN NVR400L
Default version status: unaffected
0 to ≤ 1.1.66affected
Merit LILIN NVR1400L
Default version status: unaffected
0 to ≤ 1.1.66affected
Merit LILIN NVR2400L
Default version status: unaffected
0 to ≤ 1.1.66affected
Merit LILIN NVR3216
Default version status: unaffected
0 to ≤ 2.0.74.3921affected
Merit LILIN NVR3416
Default version status: unaffected
0 to ≤ 2.0.74.3921affected
Merit LILIN NVR3416r
Default version status: unaffected
0 to ≤ 2.0.74.3921affected
Merit LILIN NVR3816
Default version status: unaffected
0 to ≤ 2.0.74.3921affected
Merit LILIN NVR5832
Default version status: unaffected
0 to ≤ 4.0.24.4043affected
Merit LILIN NVR5832S
Default version status: unaffected
0 to ≤ 4.0.24.4043affected
Merit LILIN NVR5104E
Default version status: unaffected
0 to ≤ 4.0.24.4078affected
Merit LILIN NVR5208E
Default version status: unaffected
0 to ≤ 4.0.24.4078affected
Merit LILIN NVR5416E
Default version status: unaffected
0 to ≤ 4.0.24.4078affected