CVE-2022-47618

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can use these credentials to log in administrator page, to manipulate system or disrupt service.

Score

CVSS 3.1 9.8 Critical

Status

Modified - twcert@cert.org.tw

Published

2023-01-03

Last modified

2025-04-10

Weaknesses

CWE-798

Affected products

• Ah55b04 Dvr Firmware (Merit Lilin Ent. Co. Ltd.)
• Ah55b08 Dvr Firmware (Merit Lilin Ent. Co. Ltd.)
• Ah55b04 Firmware (Meritlilin)
• Ah55b08 Firmware (Meritlilin)

References

• https://www.twcert.org.tw/tw/cp-132-6825-6691e-1.html