CVE-2021-44373

This CVE affects Reolink RLC-410W (v3.0.0.136_20121102). The vulnerability lies in the cgiserver.cgi JSON command parser: when parsing the body of API requests, the code assumes param is an object. If a request provides a non-object for the param field, the parser can trigger an assertion and cau...