CVE-2021-30168

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-200CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Apr 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-301697.5The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.CVE-2021-30177.5The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading theCVE-2021-301705.4Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject CVE-2021-301715.4Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JaCVE-2021-301725.4Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authentCVE-2021-301736.5Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path inCVE-2021-301745.4RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow reCVE-2021-301759.8ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.CVE-2021-301769.8The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.CVE-2021-301779.8There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs becCVE-2021-301785.5An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer dereference for certain aCVE-2021-301799.8Apache Dubbo prior to 2.6.9 and 2.7.9 by default supports generic calls to arbitrary methods exposed by provider interfaces. These invocatio
CVE-2021-30168: Critical severity, CVSS 9.8 | Vulnix