Denial of Service Vulnerability in Reolink RLC-410W v3.0.0.136_20121102's cgiserver.cgi API Command Parser

CVE-2021-40423 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.

Learn more about our Cis Benchmark Audit For Server Software.