Critical severity9.8NVD Advisory· Published Apr 28, 2021· Updated Jun 17, 2026

CVE-2021-30167

Description

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Merit LILIN/network camera devicellm-create
MERIT LILIN ENT.CO.,LTD./P2/Z2/P3/Z3 IP camera firmwarev5
Range: unspecified

Patches

Vulnerability mechanics

References

gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3envdThird Party Advisory
www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388nvdThird Party Advisory
www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdfnvdVendor Advisory
www.twcert.org.tw/tw/cp-132-4676-391a5-1.htmlnvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000