go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

TVN ID TVN-202104003
CVE ID CVE-2021-30167
CVSS 9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware prior version 7.1.94.8908
Description The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.
Solution Update P2/Z2/P3/Z3 IP camera firmware to SVN9695
Credit keniver
Public Date 2021-04-28
Top