Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Merit LILIN DVR Firmware — meritlilin.com/assets/uploads/support/file/M00158-TW.pdf Clear all filters
TI-2025-24290 CVE-2025-34132 · GHSA-g9j5-xpjv-f35r

LILIN DVR Command Injection via NTPUpdate in dvr_box

Priority MEDIUM 51

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01696 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-20
TI-2025-24289 CVE-2025-34130 · GHSA-r252-84qw-9rcg

LILIN DVR Arbitrary File Read via net_html.cgi

Priority MEDIUM 46

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01116 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-200
TI-2025-24288 CVE-2025-34129 · GHSA-hjgc-c8mr-mg36

LILIN DVR RCE via Malicious FTP/NTP Configuration

Priority MEDIUM 48

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configurat…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01097 Published 2025-07-16 Fixed in 2.0b60_20200207 CWE-20