Meritlilin z3r6522x Firmware vulnerabilities

4 CVEs affecting Meritlilin z3r6522x Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30169, published 2021-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-30166, published 2021-04-28. High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days. The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after…
CVE-2021-30167, published 2021-04-28. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to…
CVE-2021-30168, published 2021-04-28. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.
CVE-2021-30169, published 2021-04-28. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.