Read the docs

Merit LILIN

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Merit LILIN records in CISA KEV

No Merit LILIN vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
P2g1022 Firmware 4 records MEDIUM P2g1022x Firmware 4 records MEDIUM P2g1052 Firmware 4 records MEDIUM P2r3022ae2 Firmware 4 records MEDIUM P2r3052ae2 Firmware 4 records MEDIUM P2r6322ae2 Firmware 4 records MEDIUM P2r6322ae4 Firmware 4 records MEDIUM P2r6352ae2 Firmware 4 records MEDIUM

Records

10 records

TI-2025-24290 CVE-2025-34132 · GHSA-g9j5-xpjv-f35r

LILIN DVR Command Injection via NTPUpdate in dvr_box

Priority MEDIUM 51

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01696 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-20
TI-2025-24288 CVE-2025-34129 · GHSA-hjgc-c8mr-mg36

LILIN DVR RCE via Malicious FTP/NTP Configuration

Priority MEDIUM 48

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configurat…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01097 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-20
TI-2025-24289 CVE-2025-34130 · GHSA-r252-84qw-9rcg

LILIN DVR Arbitrary File Read via net_html.cgi

Priority MEDIUM 46

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01116 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-200
TI-2026-00636 CVE-2026-0855 · GHSA-vfvj-3wmg-p6fj

Merit LILIN｜IP Camera - OS Command Injection

Priority MEDIUM 42

Certain IP Camera models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01175 Published 2026-01-12 No fix listed CWE-78
TI-2026-00635 CVE-2026-0854 · GHSA-v5x6-vvfr-6v34

Merit LILIN｜NVR - OS Command Injection

Priority MEDIUM 42

Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0115 Published 2026-01-12 No fix listed CWE-78
Open these records in search →