CVE-2021-44396

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Preview param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44396

creationtimestamp| type| source ---|---|--- 2022-01-29 00:28:13+00:00| seen| https://t.me/cibsecurity/36550...

CVE-2021-44396

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Preview param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44396

CVE-2021-44396 affects Reolink RLC-410W (cgiserver.cgi JSON command parser). A specially crafted HTTP body, which can contain JSON arrays of commands, may trigger asserts in the param parsing when param is not an object, potentially rebooting the device and causing a denial of service. TALOS deta...