CVE-2021-30168 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1
Remote attackers can access unprotected sensitive data to obtain administrator credentials and control MERIT LILIN IP cameras.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-30168?
CVE-2021-30168 is a critical vulnerability in MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware, published on 28 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.
Which versions are affected by CVE-2021-30168?
It affects 41 products.
Products include Meritlilin P2g1022 Firmware, Meritlilin P2g1022x Firmware, Meritlilin P2g1052 Firmware, Meritlilin P2r3022ae2 Firmware, Meritlilin P2r3052ae2 Firmware, Meritlilin P2r6322ae2 Firmware and 35 more.
How do I fix CVE-2021-30168?
No fix has been published for CVE-2021-30168 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-30168 being exploited?
There is no known exploitation of CVE-2021-30168 in the wild and no public exploit code.
Other vulnerabilities in MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware
Sources
Also known as GHSA-2fm2-p76r-3mv9.