CVE-2021-44360

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetNorm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44360

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetNorm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44360

CVE-2021-44360 affects Reolink RLC-410W (v3.0.0.136_20121102). The denial-of-service stems from cgiserver.cgi JSON command parser, where a crafted HTTP body can trigger a reboot. The issue is tied to non-object param handling (e.g., SetNorm) and can be exploited via a network request without auth...