CVE-2021-44419

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMdAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44419

CVE-2021-44419 affects Reolink RLC-410W (v3.0.0.136_20121102). The cgiserver.cgi JSON command parser is vulnerable to a crafted HTTP request where param is not an object, causing the cgiserver.cgi process to assert and reboot the device (DoS). Exploitation is described in Talos TALOS-2021-1421, w...