CVE-2021-44415

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44415

CVE-2021-44415 affects the Reolink RLC-410W cgiserver.cgi JSON command parser (v3.0.0.136_20121102). A specially crafted HTTP request can trigger an assertion in the JSON parsing flow when the param is not an object, potentially rebooting the device. The issue is detailed in TALOS-2021-1421, whic...