Skip to content
OpenAdvisories
High · 7.7 CVE-2021-40405 EUVD-2021-27582GHSA-82gr-5fpf-q3w4

A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A speciall…

Published Apr 14, 2022 · Updated Apr 15, 2025 · Assigned by talos

Vendor: Reolink Product: RLC-410W

Description

A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Reolink RLC-410W v3.0.0.136_20121102 —

References