CVE-2021-44400

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44400

CVE-2021-44400 is a denial-of-service flaw in Reolink RLC-410W (v3.0.0.136_20121102) cgiserver.cgi JSON command parser. A specially crafted HTTP body can trigger an assertion crash during JSON parsing when a param is not an object (e.g., GetPtzPatrol), forcing the cgiserver.cgi process to crash a...