CVE-2021-44418

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44417

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44417

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44418

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44417

The CVE-2021-44417 entry corresponds to a denial-of-service in the Reolink RLC-410W cgiserver.cgi JSON command parser. The TALOS report details multiple DoS vectors where the API’s JSON body parsing assumes param objects; providing a JSON array with a non-object param can trigger an assertion and...

CVE-2021-44416

CVE-2021-44416 describes a denial-of-service vulnerability in the cgiserver.cgi JSON command parser of the Reolink RLC-410W (v3.0.0.136_20121102). A specially crafted HTTP request can trigger a reboot by causing the parser to assert when the JSON element for param is not an object (e.g., param is...

CVE-2021-44416

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Disconnect param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44415

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44415

CVE-2021-44415 affects the Reolink RLC-410W cgiserver.cgi JSON command parser (v3.0.0.136_20121102). A specially crafted HTTP request can trigger an assertion in the JSON parsing flow when the param is not an object, potentially rebooting the device. The issue is detailed in TALOS-2021-1421, whic...

CVE-2021-44414

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44414

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44414

The CVE-2021-44414 entry concerns Reolink RLC-410W CGIs erver CGI JSON command parser DoS vulnerability. A specially crafted HTTP request that triggers the JSON command handling can reboot the device, with the DelUser parameter being non-object as a key issue. The affected device is the RLC-410W ...

CVE-2021-44413

CVE-2021-44413 affects the Reolink RLC-410W camera’s cgiserver.cgi JSON command parser. The TALOS advisory documents multiple DoS variants on v3.0.0.136_20121102 where sending a crafted HTTP request can cause the cgiserver.cgi process to reboot the device. Root cause involves the parser assuming ...

CVE-2021-44412

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44407

The CVE-2021-44407 entry affects Reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A DoS condition arises when a JSON body in the API requests contains a non-object param for certain commands, triggering an assert in the cgiserver.cgi path and causing the device re...

CVE-2021-44407

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestEmail param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44406

CVE-2021-44406 affects the reolink RLC-410W camera (v3.0.0.136_20121102) via its cgiserver.cgi JSON command parser. A malformed HTTP request can trigger a denial-of-service condition by causing the cgiserver.cgi process to reboot. Talos describes our affected component as the cgiserver.cgi JSON c...

CVE-2021-44405

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44405

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44406

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...