CVE-2021-44383

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetAutoUpgrade param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44383

CVE-2021-44383 describes a denial-of-service in the Reolink RLC-410W cgiserver.cgi JSON command parser. A specially-crafted HTTP body (JSON array of commands) can cause the cgiserver.cgi process to reboot, due to parsing assumptions that each param is an object. TALOS details show high-severity i...