Merit LILIN IP Cameras OS Command Injection Vulnerability

An OS command injection vulnerability has been identified in certain IP camera models developed by Merit LILIN. This vulnerability allows authenticated remote attackers to inject and execute arbitrary OS commands on the affected devices. The vulnerable models include the P2, P3, Z7, P6, V1, IPD, IPR, LD, and LR series.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the device's operating system.

Remediation

The IPD, IPR, LD, and LR models are no longer supported, and users are recommended to replace these cameras. For the other affected models, users should refer to the official advisory (M00176) to update the firmware.