CVE-2021-44409

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestWifi param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44409

CVE-2021-44409 affects Reolink RLC-410W (v3.0.0.136_20121102). The cgiserver.cgi JSON command parser is vulnerable to crafted HTTP POST bodies where param is not an object, causing the parser to assert and the device to reboot (DoS). TALOS confirms multiple DoS variants and a high CVSS in the 8.0...

CVE-2021-44408

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44408

CVE-2021-44408 affects Reolink RLC-410W (CGI: cgiserver.cgi) where the JSON command parser can be invoked with a non-object param, triggering an assertion and reboot. Talos details show a CGI JSON flow where param is extracted and passed to a generic j2s handler; if param is not an object, an ass...

CVE-2021-44408

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44403

CVE-2021-44403 affects Reolink RLC-410W (v3.0.0.136_20121102) and is triggered via the cgiserver.cgi JSON command parser. The vulnerability allows a specially crafted HTTP request to reboot the device due to improper handling of JSON elements; specifically, the GetPtzTattern parameter is not an o...

CVE-2021-44403

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44402

CVE-2021-44402 affects the Reolink RLC-410W (v3.0.0.136_20121102) and is caused by a flaw in the cgiserver.cgi JSON command parser. A crafted HTTP request can trigger an assert when the API parses the JSON body, causing the cgiserver.cgi process to reboot the device and potentially disrupt servic...

CVE-2021-44402

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44401

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44402

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44401

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44401

CVE-2021-44401 affects the Reolink RLC-410W (v3.0.0.136_20121102). The vulnerability lies in the cgiserver.cgi JSON command parser: when processing a crafted HTTP body, particularly with a non-object param, the cgiserver.cgi can trigger a reboot of the device, causing a denial of service. Exploit...

CVE-2021-44400

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44400

CVE-2021-44400 is a denial-of-service flaw in Reolink RLC-410W (v3.0.0.136_20121102) cgiserver.cgi JSON command parser. A specially crafted HTTP body can trigger an assertion crash during JSON parsing when a param is not an object (e.g., GetPtzPatrol), forcing the cgiserver.cgi process to crash a...

CVE-2021-44400

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44399

The CVE-2021-44399 issue affects Reolink RLC-410W (v3.0.0.136_20121102) through the cgiserver.cgi JSON command parser. TALOS describes multiple DoS vectors where a specially crafted HTTP request can cause the cgiserver.cgi process to reboot by triggering asserts when the API’s JSON parameters are...

CVE-2021-44399

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44399

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44397

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. rtmp=start param is not object. An attacker can send an HTTP request to trigger this vulnerability...