CVE-2021-44358

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44358

CVE-2021-44358 affects Reolink RLC-410W (cgiserver.cgi JSON command parser). A specially crafted HTTP request can trigger a reboot (DoS) via the SetRec parameter handling when the JSON element is not an object. Connected documents corroborate a family of DoS variants for the cgiserver.cgi API (mu...