Description (CNA)
Certain DVR/NVR models developed by Merit LILIN has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Merit LILIN / DH032 | affected 0 through 1.0.28.3858 |
| Merit LILIN / DVR708 | affected 0 through 1.3.4 |
| Merit LILIN / DVR716 | affected 0 through 1.3.4 |
| Merit LILIN / DVR804 | affected 0 through 1.3.4 |
| Merit LILIN / DVR808 | affected 0 through 1.3.4 |
| Merit LILIN / DVR816 | affected 0 through 1.3.4 |
| Merit LILIN / NVR100L | affected 0 through 1.1.66 |
| Merit LILIN / NVR200L | affected 0 through 1.1.66 |
| Merit LILIN / NVR400L | affected 0 through 1.1.66 |
| Merit LILIN / NVR1400L | affected 0 through 1.1.66 |
| Merit LILIN / NVR2400L | affected 0 through 1.1.66 |
| Merit LILIN / NVR3216 | affected 0 through 2.0.74.3921 |
| Merit LILIN / NVR3416 | affected 0 through 2.0.74.3921 |
| Merit LILIN / NVR3416r | affected 0 through 2.0.74.3921 |
| Merit LILIN / NVR3816 | affected 0 through 2.0.74.3921 |
| Merit LILIN / NVR5832 | affected 0 through 4.0.24.4043 |
| Merit LILIN / NVR5832S | affected 0 through 4.0.24.4043 |
| Merit LILIN / NVR5104E | affected 0 through 4.0.24.4078 |
| Merit LILIN / NVR5208E | affected 0 through 4.0.24.4078 |
| Merit LILIN / NVR5416E | affected 0 through 4.0.24.4078 |
CWE
CWE-78
References
- https://www.twcert.org.tw/tw/cp-132-10624-6599c-1.html
- https://www.twcert.org.tw/en/cp-139-10623-4f523-2.html
ADP enrichment
No English description supplied.
No references supplied.