CVE-2021-44410

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. UpgradePrepare param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44410

The CVE-2021-44410 entry pertains to the Reolink RLC-410W camera (v3.0.0.136_20121102) and affects the cgiserver.cgi JSON command parser. The vulnerability arises from the server’s handling of JSON arrays of commands, where certain inputs can cause the code to assert when param is not an object, ...