CNNVD-202601-1857 Information

CNNVD ID

CNNVD-202601-1857

CVE-2026-0854

  • CNNVD Published: 2026-01-12

Description (Chinese)

Merit LILIN DVR Series和Merit LILIN NVR Series都是中国台湾利凌(Merit LILIN)公司的产品。Merit LILIN DVR Series是一系列数字视频录像机。Merit LILIN NVR Series是一系列网络视频录像机。 Merit LILIN DVR Series和Merit LILIN NVR Series存在操作系统命令注入漏洞,该漏洞源于OS命令注入,可能导致经过身份验证的远程攻击者注入任意OS命令并在设备上执行。

Description (English)

Merit LILIN DVR Series and Merit LILIN NVR Series are products of Melit LILIN, China. Merit LILIN DVR Series is a series of digital video recorders. Merit LILIN NVR Series is a series of web video cameras. Merit LILIN DVR Series and Merit LILIN NVR Series had a loophole in their operating system orders, which originated from an OS order injection, which could result in an identified remote assailant being injected into an arbitrary OS order and executed on the equipment.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

利凌

Published

2026-01-12

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10623-4f523-2.html https://www.twcert.org.tw/tw/cp-132-10624-6599c-1.html

Patch

https://www.meritlilin.com/index.php/en/support/file/type/Firmware

Share on: