Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection
Vulnerability Description
The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Vivotek VIVOTEK IP Camera 操作系统命令注入漏洞
Vulnerability Description
Vivotek VIVOTEK IP Camera是中国台湾晶睿通讯（Vivotek）公司的一款IP摄像机。 IP camera device 存在操作系统命令注入漏洞，该漏洞源于NTP Server configuration未使用特殊参数进行校验。远程攻击者可利用该漏洞可以使用特权权限登录后执行命令注入攻击，并执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A