CVE-2021-44384

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44384

creationtimestamp| type| source ---|---|--- 2022-01-29 00:22:10+00:00| seen| https://t.me/cibsecurity/36528...

CVE-2021-44384

CVE-2021-44384 affects the reolink RLC-410W (firmware 3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A specially crafted HTTP request can cause the cgiserver.cgi process to reboot the device by triggering an assert when a JSON param is not an object (SetPtzTattern and related APIs...

CVE-2021-44384

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability...