CVE-2021-30168
CRITICALCVSS 9.8/10EPSS 2.13%
Last modified
CVE-2021-30168 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.. EPSS estimates a 2.13% chance of exploitation in the next 30 days.
Description
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Meritlilin | P2r8852e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r8852e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6852e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6852e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6552e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6552e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6352ae2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6352ae4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r3052ae2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2g1052 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r8822e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r8822e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6822e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6822e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6522e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6522e4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6322ae2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r6322ae4 Firmware | < 7.1.94.8908 |
| Meritlilin | P2r3022ae2 Firmware | < 7.1.94.8908 |
| Meritlilin | P2g1022 Firmware | < 7.1.94.8908 |
| Meritlilin | P2g1022x Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8852ax Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8152x-P Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8152x2-P Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8052ex25 Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6552x Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6452ax Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6452ax-P Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8822ax Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8122x-P Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8122x2-P Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r8022ex25 Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6522x Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6422ax Firmware | < 7.1.94.8908 |
| Meritlilin | Z2r6422ax-P Firmware | < 7.1.94.8908 |
| Meritlilin | P3r6322e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P3r6522e2 Firmware | < 7.1.94.8908 |
| Meritlilin | P3r8822e2 Firmware | < 7.1.94.8908 |
| Meritlilin | Z3r6422x3 Firmware | < 7.1.94.8908 |
| Meritlilin | Z3r6522x Firmware | < 7.1.94.8908 |
| Meritlilin | Z3r8922x3 Firmware | < 7.1.94.8908 |
References
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3eThird Party Advisory
- https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.htmlThird Party Advisory
- https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3eThird Party Advisory
- https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388Third Party Advisory
- https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.htmlThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-30168?
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.
How severe is CVE-2021-30168?
CVE-2021-30168 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 2.13% probability of exploitation in the next 30 days.
How do I fix CVE-2021-30168?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-30162An issue was discovered on LG mobile devices with Android OS…7.1
- CVE-2021-30163Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers…7.5
- CVE-2021-30164Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers…9.8
- CVE-2021-30165The default administrator account & password of the EDIMAX w…8.1
- CVE-2021-30166The NTP Server configuration function of the IP camera devic…7.2
- CVE-2021-30167The manage users profile services of the network camera devi…9.8
- CVE-2021-30169The sensitive information of webcam device is not properly p…7.5
- CVE-2021-3017The web interface on Intelbras WIN 300 and WRN 342 devices t…7.5
- CVE-2021-30170Special characters of ERP POS customer profile page are not …5.4
- CVE-2021-30171Special characters of ERP POS news page are not filtered in …5.4
- CVE-2021-30172Special characters of picture preview page in the Quan-Fang-…5.4
- CVE-2021-30173Local File Inclusion vulnerability of the omni-directional c…6.5
Are you affected by CVE-2021-30168?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST