CVE-2025-34132

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices running firmware versions prior to 2.0b60_20200207 . The flaw resides in the web service at /z/zbin/dvr_box, where the application fails to properly sanitize input provided to the Server field within the NTPUpd...