Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-30168: The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

CVE-2021-30168 · published 5 years ago

Summary

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

What to do

Update meritlilin p2r8852e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r8852e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6852e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6852e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6552e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6552e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6352ae2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6352ae4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r3052ae2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2g1052_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r8822e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r8822e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6822e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6822e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6522e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6522e4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6322ae2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r6322ae4_firmware to version 7.1.94.8908 or later.
Update meritlilin p2r3022ae2_firmware to version 7.1.94.8908 or later.
Update meritlilin p2g1022_firmware to version 7.1.94.8908 or later.
Update meritlilin p2g1022x_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8852ax_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8152x-p_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8152x2-p_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8052ex25_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6552x_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6452ax_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6452ax-p_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8822ax_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8122x-p_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8122x2-p_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r8022ex25_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6522x_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6422ax_firmware to version 7.1.94.8908 or later.
Update meritlilin z2r6422ax-p_firmware to version 7.1.94.8908 or later.
Update meritlilin p3r6322e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p3r6522e2_firmware to version 7.1.94.8908 or later.
Update meritlilin p3r8822e2_firmware to version 7.1.94.8908 or later.
Update meritlilin z3r6422x3_firmware to version 7.1.94.8908 or later.
Update meritlilin z3r6522x_firmware to version 7.1.94.8908 or later.
Update meritlilin z3r8922x3_firmware to version 7.1.94.8908 or later.

Affected software

Vendor	Product	Affected versions
meritlilin	p2r8852e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r8852e2_firmware::::::::`
meritlilin	p2r8852e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r8852e4_firmware::::::::`
meritlilin	p2r6852e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6852e2_firmware::::::::`
meritlilin	p2r6852e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6852e4_firmware::::::::`
meritlilin	p2r6552e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6552e2_firmware::::::::`
meritlilin	p2r6552e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6552e4_firmware::::::::`
meritlilin	p2r6352ae2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6352ae2_firmware::::::::`
meritlilin	p2r6352ae4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6352ae4_firmware::::::::`
meritlilin	p2r3052ae2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r3052ae2_firmware::::::::`
meritlilin	p2g1052_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2g1052_firmware::::::::`
meritlilin	p2r8822e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r8822e2_firmware::::::::`
meritlilin	p2r8822e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r8822e4_firmware::::::::`
meritlilin	p2r6822e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6822e2_firmware::::::::`
meritlilin	p2r6822e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6822e4_firmware::::::::`
meritlilin	p2r6522e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6522e2_firmware::::::::`
meritlilin	p2r6522e4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6522e4_firmware::::::::`
meritlilin	p2r6322ae2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6322ae2_firmware::::::::`
meritlilin	p2r6322ae4_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r6322ae4_firmware::::::::`
meritlilin	p2r3022ae2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2r3022ae2_firmware::::::::`
meritlilin	p2g1022_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2g1022_firmware::::::::`
meritlilin	p2g1022x_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p2g1022x_firmware::::::::`
meritlilin	z2r8852ax_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8852ax_firmware::::::::`
meritlilin	z2r8152x-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8152x-p_firmware::::::::`
meritlilin	z2r8152x2-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8152x2-p_firmware::::::::`
meritlilin	z2r8052ex25_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8052ex25_firmware::::::::`
meritlilin	z2r6552x_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6552x_firmware::::::::`
meritlilin	z2r6452ax_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6452ax_firmware::::::::`
meritlilin	z2r6452ax-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6452ax-p_firmware::::::::`
meritlilin	z2r8822ax_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8822ax_firmware::::::::`
meritlilin	z2r8122x-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8122x-p_firmware::::::::`
meritlilin	z2r8122x2-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8122x2-p_firmware::::::::`
meritlilin	z2r8022ex25_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r8022ex25_firmware::::::::`
meritlilin	z2r6522x_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6522x_firmware::::::::`
meritlilin	z2r6422ax_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6422ax_firmware::::::::`
meritlilin	z2r6422ax-p_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z2r6422ax-p_firmware::::::::`
meritlilin	p3r6322e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p3r6322e2_firmware::::::::`
meritlilin	p3r6522e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p3r6522e2_firmware::::::::`
meritlilin	p3r8822e2_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:p3r8822e2_firmware::::::::`
meritlilin	z3r6422x3_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z3r6422x3_firmware::::::::`
meritlilin	z3r6522x_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z3r6522x_firmware::::::::`
meritlilin	z3r8922x3_firmware	< 7.1.94.8908 `cpe:2.3:o:meritlilin:z3r8922x3_firmware::::::::`

Original advisory text

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

References

https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e Third Party Advisory
https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388 Third Party Advisory
https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf Vendor Advisory
https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-200Information Exposure

CWE-522Insufficiently Protected Credentials

Timeline

Published28 Apr 2021

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-30168 · NVD

Track software like this

Free during beta