Lucene search
+L

4 matches found

OSV
OSV
•added 2022/01/28 8:15 p.m.•19 views

CVE-2021-40410

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...

7.2CVSS7.3AI score0.27876EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/28 7:10 p.m.•55 views

CVE-2021-40410

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...

9.1CVSS8.2AI score0.27876EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•6 views

CVE-2021-40410: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 4 the dnsdata-dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command...

9.1CVSS7.8AI score0.27876EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•5 views

PT-2022-4168

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description An OS command injection issue exists in the device network settings functionality due to improper validation of the dns1 parameter provided through the SetLocal API. This allows a remote...

9.1CVSS0.27876EPSS
SaveExploits1References6
Rows per page
Query Builder