CVE-2021-44375

CVE-2021-44375 affects Reolink RLC-410W (v3.0.0.136_20121102). The flaw resides in the cgiserver.cgi JSON command parser: when processing a body consisting of a JSON array of commands, certain inputs cause the code to assert or the cgiserver.cgi process to reboot, effectively denying service. Tal...

CVE-2021-44375

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44375

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44366

The CVE-2021-44366 issue affects Reolink RLC-410W (firmware v3.0.0.136_20121102) where the cgiserver.cgi JSON command parser is vulnerable to multiple denial-of-service conditions. A crafted HTTP request can trigger the cgiserver.cgi process to reboot, due to improper handling of JSON arrays and ...

CVE-2021-44366

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44366

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44357

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44357

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44357

Summary: CVE-2021-44357 pertains to multiple denial-of-service vulnerabilities in the cgiserver.cgi JSON command parser of Reolink RLC-410W (v3.0.0.136_20121102). The TALOS analysis describes that the JSON parser and its param handling assume objects, and receiving non-object JSON (e.g., an empty...

CVE-2021-44356

CVE-2021-44356 affects Reolink RLC-410W (v3.0.0.136_20121102) cgiserver.cgi JSON command parser. A specially crafted HTTP request containing a JSON array can trigger an assertion in the parameter parser when param is not an object, which can kill the cgiserver.cgi process and reboot the device, i...

CVE-2021-44356

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44356

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44355

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44355

CVE-2021-44355 affects Reolink RLC-410W (v3.0.0.136_20121102) via the cgiserver.cgi JSON command parser. The TALOS report describes multiple denial-of-service conditions where a specially crafted HTTP request can trigger the cgiserver.cgi to reboot the device, caused by improper handling of JSON ...

CVE-2021-44355

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44354

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-44354

CVE-2021-44354 affects Reolink RLC-410W: multiple DoS conditions in cgiserver.cgi JSON command parser that can reboot the device via specially crafted HTTP requests. The TALOS analysis explains the vulnerability stems from parsing the JSON body; if a command’s param is not an object, assertions c...

CVE-2021-44354

Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-40405

A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2021-40405

CVE-2021-40405 affects the Reolink RLC-410W cgiserver.cgi Upgrade API in firmware v3.0.0.136_20121102. The vulnerability arises from insufficient permission checks for the Upgrade API, which can cause the device to reboot when a specially crafted HTTP request is processed, resulting in a denial o...