Lucene search

[email protected]NVD:CVE-2021-30168

HistoryApr 28, 2021 - 10:15 a.m.

CVE-2021-30168

2021-04-2810:15:08

CWE-200

CWE-522

[email protected]

web.nvd.nist.gov

webcam vulnerability

sensitive information

unauthorized access

credential compromise

remote attackers

device control

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.017

Percentile

87.9%

JSON

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Affected configurations

Nvd

Node

meritlilinp2r8852e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r8852e2Match-

Node

meritlilinp2r8852e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r8852e4Match-

Node

meritlilinp2r6852e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6852e2Match-

Node

meritlilinp2r6852e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6852e4Match-

Node

meritlilinp2r6552e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6552e2Match-

Node

meritlilinp2r6552e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6552e4Match-

Node

meritlilinp2r6352ae2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6352ae2Match-

Node

meritlilinp2r6352ae4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6352ae4Match-

Node

meritlilinp2r3052ae2_firmwareRange<7.1.94.8908

AND

meritlilinp2r3052ae2Match-

Node

meritlilinp2g1052_firmwareRange<7.1.94.8908

AND

meritlilinp2g1052Match-

Node

meritlilinp2r8822e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r8822e2Match-

Node

meritlilinp2r8822e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r8822e4Match-

Node

meritlilinp2r6822e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6822e2Match-

Node

meritlilinp2r6822e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6822e4Match-

Node

meritlilinp2r6522e2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6522e2Match-

Node

meritlilinp2r6522e4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6522e4Match-

Node

meritlilinp2r6322ae2_firmwareRange<7.1.94.8908

AND

meritlilinp2r6322ae2Match-

Node

meritlilinp2r6322ae4_firmwareRange<7.1.94.8908

AND

meritlilinp2r6322ae4Match-

Node

meritlilinp2r3022ae2_firmwareRange<7.1.94.8908

AND

meritlilinp2r3022ae2Match-

Node

meritlilinp2g1022_firmwareRange<7.1.94.8908

AND

meritlilinp2g1022Match-

Node

meritlilinp2g1022x_firmwareRange<7.1.94.8908

AND

meritlilinp2g1022xMatch-

Node

meritlilinz2r8852ax_firmwareRange<7.1.94.8908

AND

meritlilinz2r8852axMatch-

Node

meritlilinz2r8152x-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r8152x-pMatch-

Node

meritlilinz2r8152x2-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r8152x2-pMatch-

Node

meritlilinz2r8052ex25_firmwareRange<7.1.94.8908

AND

meritlilinz2r8052ex25Match-

Node

meritlilinz2r6552x_firmwareRange<7.1.94.8908

AND

meritlilinz2r6552xMatch-

Node

meritlilinz2r6452ax_firmwareRange<7.1.94.8908

AND

meritlilinz2r6452axMatch-

Node

meritlilinz2r6452ax-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r6452ax-pMatch-

Node

meritlilinz2r8822ax_firmwareRange<7.1.94.8908

AND

meritlilinz2r8822axMatch-

Node

meritlilinz2r8122x-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r8122x-pMatch-

Node

meritlilinz2r8122x2-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r8122x2-pMatch-

Node

meritlilinz2r8022ex25_firmwareRange<7.1.94.8908

AND

meritlilinz2r8022ex25Match-

Node

meritlilinz2r6522x_firmwareRange<7.1.94.8908

AND

meritlilinz2r6522xMatch-

Node

meritlilinz2r6422ax_firmwareRange<7.1.94.8908

AND

meritlilinz2r6422axMatch-

Node

meritlilinz2r6422ax-p_firmwareRange<7.1.94.8908

AND

meritlilinz2r6422ax-pMatch-

Node

meritlilinp3r6322e2_firmwareRange<7.1.94.8908

AND

meritlilinp3r6322e2Match-

Node

meritlilinp3r6522e2_firmwareRange<7.1.94.8908

AND

meritlilinp3r6522e2Match-

Node

meritlilinp3r8822e2_firmwareRange<7.1.94.8908

AND

meritlilinp3r8822e2Match-

Node

meritlilinz3r6422x3_firmwareRange<7.1.94.8908

AND

meritlilinz3r6422x3Match-

Node

meritlilinz3r6522x_firmwareRange<7.1.94.8908

AND

meritlilinz3r6522xMatch-

Node

meritlilinz3r8922x3_firmwareRange<7.1.94.8908

AND

meritlilinz3r8922x3Match-

VendorProductVersionCPE
meritlilinp2r8852e2_firmware*cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*
meritlilinp2r8852e2-cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:*
meritlilinp2r8852e4_firmware*cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*
meritlilinp2r8852e4-cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:*
meritlilinp2r6852e2_firmware*cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*
meritlilinp2r6852e2-cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:*
meritlilinp2r6852e4_firmware*cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*
meritlilinp2r6852e4-cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:*
meritlilinp2r6552e2_firmware*cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*
meritlilinp2r6552e2-cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
meritlilin	p2r8852e2_firmware	*	cpe:2.3:o:meritlilin:p2r8852e2_firmware::::::::
meritlilin	p2r8852e2	-	cpe:2.3:h:meritlilin:p2r8852e2:-:::::::*
meritlilin	p2r8852e4_firmware	*	cpe:2.3:o:meritlilin:p2r8852e4_firmware::::::::
meritlilin	p2r8852e4	-	cpe:2.3:h:meritlilin:p2r8852e4:-:::::::*
meritlilin	p2r6852e2_firmware	*	cpe:2.3:o:meritlilin:p2r6852e2_firmware::::::::
meritlilin	p2r6852e2	-	cpe:2.3:h:meritlilin:p2r6852e2:-:::::::*
meritlilin	p2r6852e4_firmware	*	cpe:2.3:o:meritlilin:p2r6852e4_firmware::::::::
meritlilin	p2r6852e4	-	cpe:2.3:h:meritlilin:p2r6852e4:-:::::::*
meritlilin	p2r6552e2_firmware	*	cpe:2.3:o:meritlilin:p2r6552e2_firmware::::::::
meritlilin	p2r6552e2	-	cpe:2.3:h:meritlilin:p2r6552e2:-:::::::*

Rows per page:

1-10 of 821

References

gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e

www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388

www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf

www.twcert.org.tw/tw/cp-132-4678-aad70-1.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.017

Percentile

87.9%

JSON

Related for NVD:CVE-2021-30168

cvelist1 prion1 cve1