Lucene search

TalosCVELIST:CVE-2021-44375

HistoryApr 14, 2022 - 7:56 p.m.

CVE-2021-44375

2022-04-1419:56:30

CWE-20

talos

www.cve.org

reolink rlc-410w

denial of service

http request

vulnerability

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

38.2%

JSON

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.

CNA Affected

[
  {
    "product": "RLC-410W",
    "vendor": "Reolink",
    "versions": [
      {
        "status": "affected",
        "version": "v3.0.0.136_20121102"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2021-1421

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

38.2%

JSON

Related for CVELIST:CVE-2021-44375