CVE-2021-40423

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102

Description A denial of service issue exists in the cgiserver.cgi API command parser functionality. This can be triggered by a specially-crafted series of HTTP requests, leading to denial of service. An attacker can exploit this by sending a crafted HTTP request.

Recommendations For Reolink RLC-410W version 3.0.0.136 20121102, consider restricting access to the cgiserver.cgi API command parser functionality until a patch is available. As a temporary workaround, avoid using the vulnerable API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.