What’s Vulnerable › Vulnerabilities

CVE-2021-30166: MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-28 · updated 2026-06-17
• Weakness: CWE-78

Description

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.

Affected products

• Meritlilin P2G1022 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2G1022X Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2G1052 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R3022Ae2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R3052Ae2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6322Ae2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6322Ae4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6352Ae2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6352Ae4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6522E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6522E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6552E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6552E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6822E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6822E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6852E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R6852E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R8822E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R8822E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R8852E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P2R8852E4 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P3R6322E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P3R6522E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin P3R8822E2 Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6422Ax-P Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6422Ax Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6452Ax-P Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6452Ax Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6522X Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908
• Meritlilin Z2R6552X Firmware: before 7.1.94.8908 — fixed in 7.1.94.8908

How to fix

Upgrade to a fixed version: Meritlilin P2G1022 Firmware 7.1.94.8908; Meritlilin P2G1022X Firmware 7.1.94.8908; Meritlilin P2G1052 Firmware 7.1.94.8908; Meritlilin P2R3022Ae2 Firmware 7.1.94.8908; Meritlilin P2R3052Ae2 Firmware 7.1.94.8908; Meritlilin P2R6322Ae2 Firmware 7.1.94.8908; Meritlilin P2R6322Ae4 Firmware 7.1.94.8908; Meritlilin P2R6352Ae2 Firmware 7.1.94.8908; Meritlilin P2R6352Ae4 Firmware 7.1.94.8908; Meritlilin P2R6522E2 Firmware 7.1.94.8908; Meritlilin P2R6522E4 Firmware 7.1.94.8908; Meritlilin P2R6552E2 Firmware 7.1.94.8908. Check the vendor advisory for mitigations.

References

• https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
• https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
• https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
• https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html
• https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e
• https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388
• https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf
• https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html

Get alerted when CVE-2021-30166 or the next vulnerability affects your stack