CVE-2021-44380

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetTime param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44380

The CVE-2021-44380 entry concerns Reolink RLC-410W (v3.0.0.136_20121102) with DoS via cgiserver.cgi JSON command parser. A specially crafted HTTP POST (JSON array) can trigger reboot when the parser mishandles SetTime (and related) parameters not being objects, leading to the camera process heart...