CVE-2021-44363

The CVE-2021-44363 family affects Reolink RLC-410W (v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser can be induced by a crafted HTTP request to reboot the device. TALOS details show the reboot occurs when parsing JSON arrays and params (e.g., SetPush) that are not objects, trigge...

CVE-2021-44363

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPush param is not object. An attacker can send an HTTP request to trigger this vulnerability...