DVR Firmware vulnerabilities
3 known vulnerabilities in DVR Firmware from Merit LILIN. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior…
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing
- 8.7 High severity
DVR Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zco
- 8.7 High severity
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior…
A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the conf