CVE-2021-44356

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102

Description Multiple denial of service issues exist in the cgiserver.cgi JSON command parser functionality. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this issue.

Recommendations For Reolink RLC-410W version 3.0.0.136 20121102, consider restricting access to the cgiserver.cgi functionality until a patch is available. As a temporary workaround, avoid using the JSON command parser functionality in the cgiserver.cgi to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.