CVE-2021-44367

CVE-2021-44367 affects Reolink RLC-410W (firmware v3.0.0.136_20121102). The cgiserver.cgi JSON command parser accepts a JSON array of commands; if param is not an object (eg, param is an empty string) the code may assert, killing the cgiserver.cgi process and rebooting the device. TALOS documents...