TVN ID | TVN-202104003 |
---|---|
CVE ID | CVE-2021-30167 |
CVSS | 9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected Products | MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware prior version 7.1.94.8908 |
Description | The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices. |
Solution | Update P2/Z2/P3/Z3 IP camera firmware to SVN9695 |
Credit | keniver |
Public Date | 2021-04-28 |