PT-2022-12054
CVE-2021-44357
·
Published
2022-04-14
·
Updated
2022-04-21
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Reolink RLC-410W version 3.0.0.136 20121102
Description
The issue affects the cgiserver.cgi JSON command parser functionality, allowing a specially-crafted HTTP request to cause a denial of service, which can lead to a reboot. An attacker can exploit this by sending a crafted HTTP request.
Recommendations
For Reolink RLC-410W version 3.0.0.136 20121102, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾