PT-2022-4167 · Reolink · Reolink Rlc-410W

Francesco Benvenuto · Published 2022-01-26 · Updated 2022-07-29 · CVE-2021-40412

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102

Description The issue exists due to the lack of proper validation of special elements used in an operating system command. This allows a remote attacker to execute arbitrary commands. Specifically, in the device network settings functionality, the devname variable is not properly validated, leading to an OS command injection. This occurs when the name parameter is provided through the "SetDevName API" endpoint.

Recommendations For Reolink RLC-410W version 3.0.0.136 20121102, as a temporary workaround, consider restricting access to the SetDevName API endpoint to minimize the risk of exploitation. Avoid using the name parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-05013

CVE-2021-40412

Affected Products

Reolink Rlc-410W

References · 6

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1424 · Exploit
• https://osv.dev/vulnerability/CVE-2021-40412 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40412 · Security Note
• https://bdu.fstec.ru/vul/2022-05013 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022012706 · Note
• https://t.me/cibsecurity/36501 · Telegram Post