CVE-2021-44387

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44387

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPreset param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44387

CVE-2021-44387 corresponds to multiple DoS issues in Reolink RLC-410W (firmware 3.0.0.136_20121102) where the cgiserver.cgi JSON command parser incorrectly handles param objects. A specially crafted HTTP body (JSON array of commands) can crash the parser or kill cgiserver.cgi, rebooting the devic...