CVE-2021-30166 : The NTP Server configuration function of the IP camera device is not verified wi

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.

Published 2021-04-28 10:15:09

Updated 2021-05-05 20:36:11

Source TWCERT/CC

View at NVD, CVE.org

Products affected by CVE-2021-30166

Meritlilin » P2r8852e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r8852e2 » Version: N/A
Meritlilin » P2r8852e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r8852e4 » Version: N/A
Meritlilin » P2r6852e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6852e2 » Version: N/A
Meritlilin » P2r6852e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6852e4 » Version: N/A
Meritlilin » P2r6552e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6552e2 » Version: N/A
Meritlilin » P2r6552e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6552e4 » Version: N/A
Meritlilin » P2r6352ae2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6352ae2 » Version: N/A
Meritlilin » P2r6352ae4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6352ae4 » Version: N/A
Meritlilin » P2r3052ae2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r3052ae2 » Version: N/A
Meritlilin » P2g1052 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2g1052 » Version: N/A
Meritlilin » P2r8822e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r8822e2 » Version: N/A
Meritlilin » P2r8822e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r8822e4 » Version: N/A
Meritlilin » P2r6822e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6822e2 » Version: N/A
Meritlilin » P2r6822e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6822e4 » Version: N/A
Meritlilin » P2r6522e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6522e2 » Version: N/A
Meritlilin » P2r6522e4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6522e4 » Version: N/A
Meritlilin » P2r6322ae2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6322ae2 » Version: N/A
Meritlilin » P2r6322ae4 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r6322ae4 » Version: N/A
Meritlilin » P2r3022ae2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2r3022ae2 » Version: N/A
Meritlilin » P2g1022 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2g1022 » Version: N/A
Meritlilin » P2g1022x Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P2g1022x » Version: N/A
Meritlilin » Z2r8852ax Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8852ax » Version: N/A
Meritlilin » Z2r8152x-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8152x-p » Version: N/A
Meritlilin » Z2r8152x2-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8152x2-p » Version: N/A
Meritlilin » Z2r8052ex25 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8052ex25 » Version: N/A
Meritlilin » Z2r6552x Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6552x » Version: N/A
Meritlilin » Z2r6452ax Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6452ax » Version: N/A
Meritlilin » Z2r6452ax-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6452ax-p » Version: N/A
Meritlilin » Z2r8822ax Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8822ax » Version: N/A
Meritlilin » Z2r8122x-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8122x-p » Version: N/A
Meritlilin » Z2r8122x2-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8122x2-p » Version: N/A
Meritlilin » Z2r8022ex25 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r8022ex25 » Version: N/A
Meritlilin » Z2r6522x Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6522x » Version: N/A
Meritlilin » Z2r6422ax Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6422ax » Version: N/A
Meritlilin » Z2r6422ax-p Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z2r6422ax-p » Version: N/A
Meritlilin » P3r6322e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P3r6322e2 » Version: N/A
Meritlilin » P3r6522e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P3r6522e2 » Version: N/A
Meritlilin » P3r8822e2 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » P3r8822e2 » Version: N/A
Meritlilin » Z3r6422x3 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z3r6422x3 » Version: N/A
Meritlilin » Z3r6522x Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z3r6522x » Version: N/A
Meritlilin » Z3r8922x3 Firmware
Versions before (<) 7.1.94.8908
cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Meritlilin » Z3r8922x3 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-30166

EPSS FAQ

6.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 90 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-30166

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	TWCERT/CC
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-30166

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: twcert@cert.org.tw (Primary)

References for CVE-2021-30166

https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388

CHT Security Red Team Discovered Several Vulnerabilities in Well-Known IP Camera｜中華資安國際 CHT Security Co., Ltd.
Third Party Advisory

CVEs referencing this url
https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf

Vendor Advisory

CVEs referencing this url
https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e

LILIN IP Camera P2 Z2 Multiple Vulnerabilities.md · GitHub
Third Party Advisory

CVEs referencing this url
https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html

TWCERT/CC台灣電腦網路危機處理暨協調中心-利凌企業 P2/Z2/P3/Z3系列網路攝影機 - Command Injection
Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-30166

Products affected by CVE-2021-30166

Exploit prediction scoring system (EPSS) score for CVE-2021-30166

CVSS scores for CVE-2021-30166

CWE ids for CVE-2021-30166

References for CVE-2021-30166