Lucene search

TalosCVELIST:CVE-2021-44394

HistoryApr 14, 2022 - 7:56 p.m.

CVE-2021-44394

2022-04-1419:56:32

CWE-20

talos

www.cve.org

denial of service

reolink rlc-410w

http request

cgiserver.cgi

json command parser

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

38.2%

JSON

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.

CNA Affected

[
  {
    "product": "RLC-410W",
    "vendor": "Reolink",
    "versions": [
      {
        "status": "affected",
        "version": "v3.0.0.136_20121102"
      }
    ]
  }
]

References

talosintelligence.com/vulnerability_reports/TALOS-2021-1421

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

38.2%

JSON

Related for CVELIST:CVE-2021-44394