What is the CVSS score of CVE-2021-30169?

CVE-2021-30169 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.7%.

P2R8852E2 Firmware CVE-2021-30169

HIGH

Information Exposure (CWE-200)

2021-04-28 twcert@cert.org.tw

Information Disclosure P2R8852E2 Firmware P2R8852E4 Firmware P2R6852E2 Firmware P2R6852E4 Firmware P2R6552E2 Firmware P2R6552E4 Firmware P2R6352Ae2 Firmware P2R6352Ae4 Firmware P2R3052Ae2 Firmware P2G1052 Firmware P2R8822E2 Firmware P2R8822E4 Firmware P2R6822E2 Firmware P2R6822E4 Firmware P2R6522E2 Firmware P2R6522E4 Firmware P2R6322Ae2 Firmware P2R6322Ae4 Firmware P2R3022Ae2 Firmware P2G1022 Firmware P2G1022X Firmware Z2R8852Ax Firmware Z2R8152X P Firmware Z2R8152X2 P Firmware Z2R8052Ex25 Firmware Z2R6552X Firmware Z2R6452Ax Firmware Z2R6452Ax P Firmware Z2R8822Ax Firmware Z2R8122X P Firmware Z2R8122X2 P Firmware Z2R8022Ex25 Firmware Z2R6522X Firmware Z2R6422Ax Firmware Z2R6422Ax P Firmware P3R6322E2 Firmware P3R6522E2 Firmware P3R8822E2 Firmware Z3R6422X3 Firmware Z3R6522X Firmware Z3R8922X3 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Apr 28, 2021 - 10:15 nvd

HIGH 7.5

DescriptionNVD

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.

AnalysisAI

The sensitive information of webcam device is not properly protected. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential. Affected products include: Meritlilin P2R8852E2 Firmware, Meritlilin P2R8852E4 Firmware, Meritlilin P2R6852E2 Firmware, Meritlilin P2R6852E4 Firmware, Meritlilin P2R6552E2 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.