Reolink
Page 2 of 2 — Reolink CVEs from a corpus of 107, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40408 | Critical | 9.8 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS… |
CVE-2021-40407 | High | 7.2 | 2022-01-28 | An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS… |
CVE-2021-40406 | High | 7.5 | 2022-01-28 | A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP… |
CVE-2021-40404 | Medium | 6.5 | 2022-01-28 | An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP reques… |
CVE-2020-25173 | High | 7.8 | 2021-01-26 | An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local networ… |
CVE-2020-25169 | High | 7.5 | 2021-01-26 | The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to acce… |
CVE-2019-11001 | High | 7.2 | 2019-04-08 | On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and… |