CVE-2021-40407

creationtimestamp| type| source ---|---|--- 2022-01-28 22:22:05+00:00| seen| https://t.me/cibsecurity/36482 2024-12-18 16:16:48+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113674722220637919 2024-12-18 17:55:15+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/292881...

CVE-2021-40407

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 1 or 2, based on DDNS type, the ddns-domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This...

CVE-2021-40407

CVE-2021-40407 affects Reolink RLC-410W IP Camera (v3.0.0.136_20121102). The vulnerability is an OS command injection in the device’s network settings via improper validation of the ddns->domain parameter in the SetDdns API, allowing an attacker to trigger commands through an HTTP request. Mul...