Meritlilin Z2r6422ax-p Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Meritlilin Z2r6422ax-p Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-30167 — CVSS 9.8 (critical): The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and…
• CVE-2021-30168 — CVSS 9.8 (critical): The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s…
• CVE-2021-30166 — CVSS 7.2 (high): The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a…
• CVE-2021-30169 — CVSS 5.3 (medium): The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.