CVE-2021-40409

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 1 or 2, based on DDNS type, the ddns-password variable, that has the value of the password parameter provided through the SetDdns API, is not validated properly. Th...

PT-2021-7510 · Reolink · Reolink Rlc-410W Ip Camera

Name of the Vulnerable Software and Affected Versions: Reolink RLC-410W IP Camera version 3.0.0.136 20121102 Description: An OS command injection vulnerability exists in the device network settings functionality due to improper validation of the ddns-domain variable. This variable has the value o...