CVE-2021-44398

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. rtmp=stop param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44398

The CVE-2021-44398 issue affects Reolink RLC-410W (v3.0.0.136_20121102) and is caused by a flaw in the cgiserver.cgi JSON command parser. The TALOS analysis describes multiple DoS scenarios where a specially crafted HTTP request can trigger the reboot by asserting on non-object JSON elements in c...