CVE-2021-30166: Meritlilin p2g1022 Firmware

High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days.

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.

Affected products

• Meritlilin p2g1022 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2g1022x Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2g1052 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r3022ae2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r3052ae2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6322ae2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6322ae4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6352ae2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6352ae4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6522e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6522e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6552e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6552e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6822e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6822e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6852e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r6852e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r8822e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r8822e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r8852e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p2r8852e4 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p3r6322e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p3r6522e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin p3r8822e2 Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• Meritlilin z2r6422ax-P Firmware: before 7.1.94.8908 (fixed in 7.1.94.8908)
• and 16 more

Published 2021-04-28. Last modified 2026-06-17.