Description
The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure http/cves/2021/CVE-2021-40150.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.