CVE-2025-34132

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices running firmware versions prior to 2.0b60_20200207 . The flaw resides in the web service at /z/zbin/dvr_box, where the application fails to properly sanitize input provided to the Server field within the NTPUpd...

CVE-2025-34132 LILIN DVR Command Injection via NTPUpdate in dvr_box

A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvrbox fails to properly sanitize input, allowing remote attackers to inject and execute...

CVE-2025-34132: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvrbox fails to properly sanitize input, allowing remote attackers to inject and execute...