CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-30167
Critical (9.8) in meritlilin. EPSS 2.4% chance of exploitation in the next 30 days.
The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.
Severity
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-306, CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- meritlilin:p2g1022_firmware
- meritlilin:p2g1022x_firmware
- meritlilin:p2g1052_firmware
- meritlilin:p2r3022ae2_firmware
- meritlilin:p2r3052ae2_firmware
- meritlilin:p2r6322ae2_firmware
- meritlilin:p2r6322ae4_firmware
- meritlilin:p2r6352ae2_firmware
- meritlilin:p2r6352ae4_firmware
- meritlilin:p2r6522e2_firmware
- meritlilin:p2r6522e4_firmware
- meritlilin:p2r6552e2_firmware
- meritlilin:p2r6552e4_firmware
- meritlilin:p2r6822e2_firmware
- meritlilin:p2r6822e4_firmware
- meritlilin:p2r6852e2_firmware
- meritlilin:p2r6852e4_firmware
- meritlilin:p2r8822e2_firmware
- meritlilin:p2r8822e4_firmware
- meritlilin:p2r8852e2_firmware
- meritlilin:p2r8852e4_firmware
- meritlilin:p3r6322e2_firmware
- meritlilin:p3r6522e2_firmware
- meritlilin:p3r8822e2_firmware
- meritlilin:z2r6422ax-p_firmware
- meritlilin:z2r6422ax_firmware
- meritlilin:z2r6452ax-p_firmware
- meritlilin:z2r6452ax_firmware
- meritlilin:z2r6522x_firmware
- meritlilin:z2r6552x_firmware
- meritlilin:z2r8022ex25_firmware
- meritlilin:z2r8052ex25_firmware
- meritlilin:z2r8122x-p_firmware
- meritlilin:z2r8122x2-p_firmware
- meritlilin:z2r8152x-p_firmware
- meritlilin:z2r8152x2-p_firmware
- meritlilin:z2r8822ax_firmware
- meritlilin:z2r8852ax_firmware
- meritlilin:z3r6422x3_firmware
- meritlilin:z3r6522x_firmware
- meritlilin:z3r8922x3_firmware
References
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
- https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
- https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
- https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e