CVE-2021-44410

Name of the Vulnerable Software and Affected Versions reolink RLC-410W version 3.0.0.136 20121102

Description A denial of service issue exists in the cgiserver.cgi JSON command parser functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. The UpgradePrepare param is not an object, allowing an attacker to send an HTTP request to exploit this issue.

Recommendations For version 3.0.0.136 20121102, upgrade to a newer version that addresses this issue. As a temporary workaround, consider restricting access to the cgiserver.cgi JSON command parser functionality to minimize the risk of exploitation.