CVE-2021-30166

7.2 highEPSS 3.8%

High (7.2) in meritlilin. EPSS 3.8% chance of exploitation in the next 30 days.

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

meritlilin:p2g1022_firmware
meritlilin:p2g1022x_firmware
meritlilin:p2g1052_firmware
meritlilin:p2r3022ae2_firmware
meritlilin:p2r3052ae2_firmware
meritlilin:p2r6322ae2_firmware
meritlilin:p2r6322ae4_firmware
meritlilin:p2r6352ae2_firmware
meritlilin:p2r6352ae4_firmware
meritlilin:p2r6522e2_firmware
meritlilin:p2r6522e4_firmware
meritlilin:p2r6552e2_firmware
meritlilin:p2r6552e4_firmware
meritlilin:p2r6822e2_firmware
meritlilin:p2r6822e4_firmware
meritlilin:p2r6852e2_firmware
meritlilin:p2r6852e4_firmware
meritlilin:p2r8822e2_firmware
meritlilin:p2r8822e4_firmware
meritlilin:p2r8852e2_firmware
meritlilin:p2r8852e4_firmware
meritlilin:p3r6322e2_firmware
meritlilin:p3r6522e2_firmware
meritlilin:p3r8822e2_firmware
meritlilin:z2r6422ax-p_firmware
meritlilin:z2r6422ax_firmware
meritlilin:z2r6452ax-p_firmware
meritlilin:z2r6452ax_firmware
meritlilin:z2r6522x_firmware
meritlilin:z2r6552x_firmware
meritlilin:z2r8022ex25_firmware
meritlilin:z2r8052ex25_firmware
meritlilin:z2r8122x-p_firmware
meritlilin:z2r8122x2-p_firmware
meritlilin:z2r8152x-p_firmware
meritlilin:z2r8152x2-p_firmware
meritlilin:z2r8822ax_firmware
meritlilin:z2r8852ax_firmware
meritlilin:z3r6422x3_firmware
meritlilin:z3r6522x_firmware
meritlilin:z3r8922x3_firmware

References

Check your stack JSON