CVE-2022-47618: Meritlilin AH55B04 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service.

Affected products

• Meritlilin AH55B04 Firmware: affected versions not specified
• Meritlilin AH55B08 Firmware: affected versions not specified

Published 2023-01-03. Last modified 2026-06-17.