CVE-2021-30167
Critical
Description
The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMeritlilin P2r8852e2 Firmware
PublishedApr 28, 2021
First seenApr 28, 2021
Weakness typeCWE-522CWE-522
How to fix
Update
- meritlilin p2r8852e2_firmware7.1.94.8908 or later
- meritlilin p2r8852e4_firmware7.1.94.8908 or later
- meritlilin p2r6852e2_firmware7.1.94.8908 or later
- meritlilin p2r6852e4_firmware7.1.94.8908 or later
- meritlilin p2r6552e2_firmware7.1.94.8908 or later
- meritlilin p2r6552e4_firmware7.1.94.8908 or later
- meritlilin p2r6352ae2_firmware7.1.94.8908 or later
- meritlilin p2r6352ae4_firmware7.1.94.8908 or later
- meritlilin p2r3052ae2_firmware7.1.94.8908 or later
- meritlilin p2g1052_firmware7.1.94.8908 or later
- meritlilin p2r8822e2_firmware7.1.94.8908 or later
- meritlilin p2r8822e4_firmware7.1.94.8908 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| meritlilin p2r8852e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r8852e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6852e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6852e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6552e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6552e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6352ae2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6352ae4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r3052ae2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2g1052_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r8822e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r8822e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6822e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6822e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6522e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6522e4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6322ae2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r6322ae4_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2r3022ae2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2g1022_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p2g1022x_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8852ax_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8152x-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8152x2-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8052ex25_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6552x_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6452ax_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6452ax-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8822ax_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8122x-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8122x2-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r8022ex25_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6522x_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6422ax_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z2r6422ax-p_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p3r6322e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p3r6522e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin p3r8822e2_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z3r6422x3_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z3r6522x_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
| meritlilin z3r8922x3_firmware | v < 7.1.94.8908 | 7.1.94.8908 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.