CVE-2021-44405

CVE-2021-44405 affects the reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. A crafted HTTP request can reboot the device, with StartZoomFocus param not being an object triggering an assertion and reboot. Multiple sources (e.g., TALOS, NVD) describe the vulnerabili...

CVE-2021-44404

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44410

The CVE-2021-44410 entry pertains to the Reolink RLC-410W camera (v3.0.0.136_20121102) and affects the cgiserver.cgi JSON command parser. The vulnerability arises from the server’s handling of JSON arrays of commands, where certain inputs can cause the code to assert when param is not an object, ...

CVE-2021-44410

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. UpgradePrepare param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44411

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44411

CVE-2021-44411 affects Reolink RLC-410W (v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser can reboot the device via specially crafted HTTP requests. Talos details show a denial-of-service that can kill the cgiserver.cgi process and reboot the camera when parsing JSON commands and ...

CVE-2021-44409

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestWifi param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44408

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44408

CVE-2021-44408 affects Reolink RLC-410W (CGI: cgiserver.cgi) where the JSON command parser can be invoked with a non-object param, triggering an assertion and reboot. Talos details show a CGI JSON flow where param is extracted and passed to a generic j2s handler; if param is not an object, an ass...

CVE-2021-44408

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44403

CVE-2021-44403 affects Reolink RLC-410W (v3.0.0.136_20121102) and is triggered via the cgiserver.cgi JSON command parser. The vulnerability allows a specially crafted HTTP request to reboot the device due to improper handling of JSON elements; specifically, the GetPtzTattern parameter is not an o...

CVE-2021-44403

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44403

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44401

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44402

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44402

CVE-2021-44402 affects the Reolink RLC-410W (v3.0.0.136_20121102) and is caused by a flaw in the cgiserver.cgi JSON command parser. A crafted HTTP request can trigger an assert when the API parses the JSON body, causing the cgiserver.cgi process to reboot the device and potentially disrupt servic...

CVE-2021-44401

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44401

CVE-2021-44401 affects the Reolink RLC-410W (v3.0.0.136_20121102). The vulnerability lies in the cgiserver.cgi JSON command parser: when processing a crafted HTTP body, particularly with a non-object param, the cgiserver.cgi can trigger a reboot of the device, causing a denial of service. Exploit...

CVE-2021-44400

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44400

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability...