CVE-2021-44370

CVE-2021-44370 affects Reolink RLC-410W (v3.0.0.136_20121102). The cgiserver.cgi JSON command parser is vulnerable to a denial-of-service via a specially crafted HTTP request, which can cause the cgiserver.cgi process to reboot the device. The issue is tied to parameter handling where SetFtp (and...