CVE-2021-44369

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetNtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44369

CVE-2021-44369 affects reolink RLC-410W (v3.0.0.136_20121102). The issue is a denial-of-service in the cgiserver.cgi JSON command parser: sending a specially crafted HTTP request can cause the device to reboot when JSON elements (param objects) are not objects, e.g., SetNtp. Root cause: improper ...