Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2021-30168
PUBLISHED
More InfoOfficial Page
Assigner-twcert
Assigner Org ID-cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e
View Known Exploited Vulnerability (KEV) details
Published At-28 Apr, 2021 | 09:30
Updated At-16 Sep, 2024 | 20:48
Rejected At-
▼CVE Numbering Authority (CNA)
MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Affected Products
Vendor
MERIT LILIN ENT.CO.,LTD.
Product
P2/Z2/P3/Z3 IP camera firmware
Versions
Affected
  • From unspecified through 7.1.94.8908 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-200CWE-200 Information Exposure
Type: CWE
CWE ID: CWE-200
Description: CWE-200 Information Exposure
Metrics
VersionBase scoreBase severityVector
3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Update P2/Z2/P3/Z3 IP camera firmware to SVN9695.

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
x_refsource_MISC
https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
x_refsource_MISC
https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
x_refsource_MISC
https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html
x_refsource_MISC
Hyperlink: https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
Resource:
x_refsource_MISC
Hyperlink: https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
Resource:
x_refsource_MISC
Hyperlink: https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
Resource:
x_refsource_MISC
Hyperlink: https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
x_refsource_MISC
x_transferred
https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
x_refsource_MISC
x_transferred
https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
x_refsource_MISC
x_transferred
https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html
x_refsource_MISC
x_transferred
Hyperlink: https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html
Resource:
x_refsource_MISC
x_transferred
Details not found