CVE-2025-34132 - CVE House
Back to Database
Status published Critical CVE-2025-34132

LILIN DVR Command Injection via NTPUpdate in dvr_box

Vulnerability Description

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as root by supplying specially crafted XML data to the DVRPOST interface.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-34132

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • 360 Netlab

References

More from Merit LILIN

View All →
CVE-2025-34130
LILIN DVR Arbitrary File Read via net_html.cgi
High 8.7
CVE-2025-34129
LILIN DVR RCE via Malicious FTP/NTP Configuration
High 8.7

Affected Vendor

Merit LILIN

View all reports →

Affected Software

DVR Firmware
Vulnerable Versions:
0

Timeline

Official Publish: July 16th, 2025
Last Modified: May 15th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-78 CWE-20

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1005 Data from Local System
Collection
T1041 Exfiltration Over C2 Channel
Exfiltration
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact