2 matches found
CVE-2025-34132
A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvrbox fails to properly sanitize input, allowing remote attackers to inject and execute...
9.3CVSS6.1AI score0.01747EPSS
SaveExploits0References5
CVE-2025-34132: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvrbox fails to properly sanitize input, allowing remote attackers to inject and execute...
9.3CVSS6.3AI score0.01747EPSS
SaveExploits0References1
20