CVE-2021-44365

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetDevName param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44365

CVE-2021-44365 affects Reolink RLC-410W (firmware v3.0.0.136_20121102). The cgiserver.cgi JSON command parser accepts crafted HTTP requests that cause the device to reboot by triggering an assertion when a param is not an object (SetDevName). The issue is a denial of service with high impact (dev...