Medium · 5.3 CVE-2021-40404 EUVD-2021-27581GHSA-4cjc-5mhc-fw55

An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20121102. A specially…

Published Jan 28, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to authentication bypass. An attacker can send an HTTP request to trigger this vulnerability.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2021-1420