VULNERABILITY INTELLIGENCE

CVE-2021-30167

CVSS score9.8 CRITICAL
EPSS probability2.44%
CISA KEVNot currently listed
Published2021-04-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices.

Weakness classification

  • twcert@cert.org.tw: CWE-522
  • nvd@nist.gov: CWE-306

Primary references