Sign-up

VARIoT IoT vulnerabilities database

Affected products: vendor, model and version
CWE format is 'CWE-number'. Threat type can be: remote or local
Look up free text in title and description

VAR-202201-0829 CVE-2021-44385 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0661 CVE-2021-40416 reolink RLC-410W  Vulnerability regarding improper default permissions in CVSS V2: 6.5
CVSS V3: 8.8
Severity: HIGH
An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. All the Get APIs that are not included in cgi_check_ability are already executable by any logged-in users. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is a vulnerability in improper default permissions.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0656 CVE-2022-21199 reolink RLC-410W  Vulnerability in using hard-coded credentials in CVSS V2: 4.3
CVSS V3: 5.9
Severity: MEDIUM
An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. reolink RLC-410W Contains a vulnerability in the use of hard-coded credentials.Information may be obtained. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0802 CVE-2021-44400 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0843 CVE-2021-44389 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAbility param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0826 CVE-2021-44417 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0831 CVE-2021-44358 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company. The Reolink RLC-410W has security flaws, which can be exploited by attackers to cause denial of service
VAR-202201-0790 CVE-2021-44401 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0803 CVE-2021-44396 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Preview param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0642 CVE-2021-40407 Reolink RLC-410W Operating System Command Injection Vulnerability CVSS V2: 7.5
CVSS V3: 7.2
Severity: HIGH
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability. (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0810 CVE-2021-44414 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0830 CVE-2021-44406 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0846 CVE-2021-44415 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0838 CVE-2021-44418 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0646 CVE-2021-40415 reolink RLC-410W  Vulnerability regarding improper default permissions in CVSS V2: 6.8
CVSS V3: 6.5
Severity: MEDIUM
An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. In cgi_check_ability the Format API does not have a specific case, the user permission will default to 7. This will give non-administrative users the possibility to format the SD card and reboot the device. Reolink Rlc-410W is a Wifi security camera from China Reolink company. An access control error vulnerability exists in Reolink RLC-410W v3.0.0.136_20121102, which originates from cgiserver.cgi cgi_check_ability not properly restricting resource access from unauthorized roles. An attacker could trigger the vulnerability to cause a denial of service by sending an HTTP request
VAR-202201-0823 CVE-2021-44411 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0784 CVE-2021-44412 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0816 CVE-2021-44354 Reolink RLC-410W cgiserver.cgi Denial of Service Vulnerability CVSS V2: 5.0
CVSS V3: 7.5
Severity: HIGH
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Reolink Rlc-410W is a Wifi security camera from China Reolink company. Reolink RLC-410W has a denial of service vulnerability in version v3.0.0.136_20121102. The vulnerability is caused by the fact that the JSON parsing function of cgiserver.cgi does not properly handle the input error message. Attackers can use this vulnerability to cause application denial of service
VAR-202201-0847 CVE-2021-44384 reolink RLC-410W  Input verification vulnerability in CVSS V2: 6.8
CVSS V3: 7.7
Severity: HIGH
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability. reolink RLC-410W There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Reolink Rlc-410W is a Wifi security camera from China Reolink company
VAR-202201-0844 CVE-2021-44375 Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37379) CVSS V2: 5.0
CVSS V3: 7.5
Severity: HIGH
Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Reolink Rlc-410W is a Wifi security camera from China Reolink company