CVE-2021-30168 - CVE House

Status published Critical CVE-2021-30168

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1

9.8 CVSS

Vulnerability Description

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-30168

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from MERIT LILIN ENT.CO.,LTD.

View All →

CVE-2021-30169

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2

Medium 5.3

CVE-2021-30167

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

Critical 9.8

CVE-2021-30166

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection

High 7.2

Affected Vendor

MERIT LILIN ENT.CO.,LTD.

View all reports →

Affected Software

P2/Z2/P3/Z3 IP camera firmware

Vulnerable Versions:

unspecified

Timeline

Official Publish: April 28th, 2021

Last Modified: September 16th, 2024

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

Collection

T1005 Data from Local System