PT-2022-12103 · Reolink · Reolink Rlc-410W

Francesco Benvenuto · Published 2022-01-28 · Updated 2022-10-25 · CVE-2021-44406

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions reolink RLC-410W version 3.0.0.136 20121102

Description A denial of service issue exists in the cgiserver.cgi JSON command parser functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. The GetAutoFocus param is not an object, which can be exploited by an attacker sending a crafted HTTP request.

Recommendations For version 3.0.0.136 20121102, consider disabling the GetAutoFocus parameter in the cgiserver.cgi JSON command parser functionality as a temporary workaround until a patch is available. Restrict access to the cgiserver.cgi module to minimize the risk of exploitation. Avoid using the GetAutoFocus parameter in affected API endpoints until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-44406

Affected Products

Reolink Rlc-410W

References · 5

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44406 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44406 · Vendor Advisory
• https://t.me/cibsecurity/36539 · Telegram Post
• https://t.me/cvenotify/26266 · Telegram Post