CVE-2022-21134 - A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102

Back Back to CVE browser

HIGH

A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102

Published Jan 28, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.91%

Description

A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-347

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26381
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447
x_refsource_MISCBroken LinkThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-26381		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447		x_refsource_MISCBroken LinkThird Party Advisory