CVE-2021-44412

The CVE-2021-44412 team lists a denial-of-service vulnerability affecting the Reolink RLC-410W camera (firmware 3.0.0.136_20121102) in the cgiserver.cgi JSON command parser. A specially crafted HTTP request can trigger a reboot by exposing an assertion failure when parsing the JSON body, specific...

CVE-2021-44412

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44412

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44407

The CVE-2021-44407 entry affects Reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A DoS condition arises when a JSON body in the API requests contains a non-object param for certain commands, triggering an assert in the cgiserver.cgi path and causing the device re...

CVE-2021-44407

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestEmail param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44407

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestEmail param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44406

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44406

CVE-2021-44406 affects the reolink RLC-410W camera (v3.0.0.136_20121102) via its cgiserver.cgi JSON command parser. A malformed HTTP request can trigger a denial-of-service condition by causing the cgiserver.cgi process to reboot. Talos describes our affected component as the cgiserver.cgi JSON c...

CVE-2021-44405

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44405

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44406

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44405

CVE-2021-44405 affects the reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A crafted HTTP request can reboot the device, with StartZoomFocus param not being an object triggering an assertion and reboot. Multiple sources (e.g., TALOS, NVD) describe the vulnerabili...

CVE-2021-44404

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44404

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44404

CVE-2021-44404 affects Reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A specially crafted HTTP request can reboot the device by triggering an assertion when the JSON param is not an object (notably GetZoomFocus). The vulnerability is rooted in input handling for...

CVE-2021-44410

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. UpgradePrepare param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44410

The CVE-2021-44410 entry pertains to the Reolink RLC-410W camera (v3.0.0.136_20121102) and affects the cgiserver.cgi JSON command parser. The vulnerability arises from the server’s handling of JSON arrays of commands, where certain inputs can cause the code to assert when param is not an object, ...

CVE-2021-44411

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44411

CVE-2021-44411 affects Reolink RLC-410W (v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser can reboot the device via specially crafted HTTP requests. Talos details show a denial-of-service that can kill the cgiserver.cgi process and reboot the camera when parsing JSON commands and ...

CVE-2021-44409

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestWifi param is not object. An attacker can send an HTTP request to trigger this vulnerability...