CVE-2025-34130
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-16

Last updated on: 2025-07-17

Assigner: VulnCheck

Description
An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to facilitate further attacks including command injection. The vulnerability has been exploited in the wild in conjunction with other issues by botnets like FBot and Moobot.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-16
Last Modified
2025-07-17
Generated
2026-05-07
AI Q&A
2025-07-17
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
lilin digital_video_recorder *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is an unauthenticated arbitrary file read in LILIN Digital Video Recorder (DVR) devices before firmware version 2.0b60_20200207. Attackers can access the /z/zbin/net_html.cgi endpoint to read sensitive configuration files like /zconf/service.xml without needing to log in. Accessing these files can help attackers launch further attacks such as command injection.


How can this vulnerability impact me? :

The vulnerability allows attackers to read sensitive configuration files on affected DVR devices without authentication. This can lead to further exploitation, including command injection attacks, potentially compromising the device and the network it is connected to. It has been actively exploited by botnets like FBot and Moobot, increasing the risk of widespread attacks.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart