Description
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MERIT LILIN ENT.CO.,LTD. | P2/Z2/P3/Z3 IP camera firmware | unspecified – ≤ 7.1.94.8908 | — |