CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-30168
Critical (9.8) in meritlilin. EPSS 2.1% chance of exploitation in the next 30 days.
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.
Severity
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-522, CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- meritlilin:p2g1022_firmware
- meritlilin:p2g1022x_firmware
- meritlilin:p2g1052_firmware
- meritlilin:p2r3022ae2_firmware
- meritlilin:p2r3052ae2_firmware
- meritlilin:p2r6322ae2_firmware
- meritlilin:p2r6322ae4_firmware
- meritlilin:p2r6352ae2_firmware
- meritlilin:p2r6352ae4_firmware
- meritlilin:p2r6522e2_firmware
- meritlilin:p2r6522e4_firmware
- meritlilin:p2r6552e2_firmware
- meritlilin:p2r6552e4_firmware
- meritlilin:p2r6822e2_firmware
- meritlilin:p2r6822e4_firmware
- meritlilin:p2r6852e2_firmware
- meritlilin:p2r6852e4_firmware
- meritlilin:p2r8822e2_firmware
- meritlilin:p2r8822e4_firmware
- meritlilin:p2r8852e2_firmware
- meritlilin:p2r8852e4_firmware
- meritlilin:p3r6322e2_firmware
- meritlilin:p3r6522e2_firmware
- meritlilin:p3r8822e2_firmware
- meritlilin:z2r6422ax-p_firmware
- meritlilin:z2r6422ax_firmware
- meritlilin:z2r6452ax-p_firmware
- meritlilin:z2r6452ax_firmware
- meritlilin:z2r6522x_firmware
- meritlilin:z2r6552x_firmware
- meritlilin:z2r8022ex25_firmware
- meritlilin:z2r8052ex25_firmware
- meritlilin:z2r8122x-p_firmware
- meritlilin:z2r8122x2-p_firmware
- meritlilin:z2r8152x-p_firmware
- meritlilin:z2r8152x2-p_firmware
- meritlilin:z2r8822ax_firmware
- meritlilin:z2r8852ax_firmware
- meritlilin:z3r6422x3_firmware
- meritlilin:z3r6522x_firmware
- meritlilin:z3r8922x3_firmware
References
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
- https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
- https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
- https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e