MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection
Priority LOW 38CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.
Why it matters now
EPSS 0.03786 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Merit LILIN | P2/Z2/P3/Z3 IP camera firmware | up to 7.1.94.8908 | — | No fix listed | CNA |
- P2/Z2/P3/Z3 IP camera firmware VendorMerit LILIN Affected up to 7.1.94.8908 Fixed in — No fix listed CNA
CPE configurations NVD · 82
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
- cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
Show 72 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
| cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:* | before 7.1.94.8908 | Vulnerable | Merit LILIN |
| cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Merit LILIN |
- cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
- cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:* Versions before 7.1.94.8908 Vulnerable ·Merit LILIN
- cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Merit LILIN
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-30166
- 2026-10-03 Alias added: GHSA-3g9r-wrp4-36rm
- 2026-11-05 EPSS moved to the 90th–95th percentile
References
More Merit LILIN P2g1022 Firmware vulnerabilities
- TI-2021-10707 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication CVSS 3.1CRITICAL 9.8
- TI-2021-10708 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-1 CVSS 3.1CRITICAL 9.8
- TI-2021-10709 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Sensitive Data Exposure-2 CVSS 3.1HIGH 7.5
Sources
- CVE-2021-30166 · CVE Program
- CVE-2021-30166 · NVD
- FIRST EPSS
- GHSA-3g9r-wrp4-36rm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences