Description
Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Merit Lilin Ent | AH55B04 DVR firmware | unspecified – ≤ SVN#7570 | — |
| Merit Lilin Ent | AH55B08 DVR firmware | unspecified – ≤ SVN#7570 | — |