CVE-2021-40407

Description

Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-40407
• https://reolink.com/product-eol/
• https://reolink.com/download-center/
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-27584
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1424