CVE-2021-30169 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2
Remote attackers can access sensitive webcam device information and obtain user credentials without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-30169?
CVE-2021-30169 is a medium-severity vulnerability in MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware, published on 28 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.
Which versions are affected by CVE-2021-30169?
It affects 41 products.
Products include Meritlilin P2g1022 Firmware, Meritlilin P2g1022x Firmware, Meritlilin P2g1052 Firmware, Meritlilin P2r3022ae2 Firmware, Meritlilin P2r3052ae2 Firmware, Meritlilin P2r6322ae2 Firmware and 35 more.
How do I fix CVE-2021-30169?
No fix has been published for CVE-2021-30169 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-30169 being exploited?
There is no known exploitation of CVE-2021-30169 in the wild and no public exploit code.
Other vulnerabilities in MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware
Sources
Also known as GHSA-xcmh-9w7w-qf4p.