CVE-2021-30169 | Severity.io

Description

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.

Related CPE's

meritlilin

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

Vulnerable

References

https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e

Third Party Advisory

https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388

Third Party Advisory

https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf

Vendor Advisory

https://www.twcert.org.tw/tw/cp-132-4679-d308c-1.html

Third Party Advisory

Weaknesses

[email protected]

Primary

CWE-522

[email protected]

Secondary

CWE-200

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-04-28T10:15:08.777

4 years ago

Last modified

2022-10-25T19:07:32.340

2 years ago