PT-2022-12083 · Reolink · Reolink Rlc-410W

Francesco Benvenuto · Published 2022-01-28 · Updated 2022-10-25 · CVE-2021-44386

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions reolink RLC-410W version 3.0.0.136 20121102

Description A denial of service issue exists in the cgiserver.cgi JSON command parser functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. The SetPtzPatrol param is not an object, which can be exploited by an attacker sending a specific HTTP request.

Recommendations For reolink RLC-410W version 3.0.0.136 20121102, consider disabling the SetPtzPatrol parameter in the cgiserver.cgi JSON command parser functionality as a temporary workaround until a patch is available. Restrict access to the cgiserver.cgi functionality to minimize the risk of exploitation. Avoid using the SetPtzPatrol parameter in affected HTTP requests until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-44386

Affected Products

Reolink Rlc-410W

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421 · Exploit
• https://osv.dev/vulnerability/CVE-2021-44386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44386 · Security Note
• https://t.me/cibsecurity/36551 · Telegram Post