CVE-2021-30166 — MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitr…
Published: 2021-04-28 · CVSS: 7.2 · CVSS 3.1
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7