CVE-2021-44391

The CVE-2021-44391 issue affects Reolink RLC-410W (firmware v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser mishandles non-object GetEnc param data, allowing a remote attacker to reboot the device via a specially crafted HTTP request. TALOS details confirm a set of JSON-command-b...

CVE-2021-44391

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetEnc param is not object. An attacker can send an HTTP request to trigger this vulnerability...