PT-2021-7509 · Reolink · Reolink Rlc-410W

Francesco Benvenuto · Published 2021-12-06 · Updated 2022-07-29 · CVE-2021-40409

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions reolink RLC-410W version 3.0.0.136 20121102

Description An OS command injection issue exists in the device network settings functionality due to improper validation of the ddns->password variable. This variable is populated with the value of the password parameter provided through the SetDdns API. The lack of proper validation leads to an OS command injection. This could allow a remote attacker to execute arbitrary commands using a specially crafted HTTP request.

Recommendations For reolink RLC-410W version 3.0.0.136 20121102, as a temporary workaround, consider restricting access to the SetDdns API until a patch is available. Avoid using the password parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-07052

CVE-2021-40409

Affected Products

Reolink Rlc-410W

References · 6

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1424 · Exploit
• https://bdu.fstec.ru/vul/2022-07052 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40409 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022012706 · Note
• https://t.me/cibsecurity/36486 · Telegram Post