← Back to browse · API

CVE-2021-40419

Severity
CRITICAL
CVSS
10.0
EPSS
0.01232
Risk score
40.43
CISA KEV
No
PoC
No
Published
2022-01-28
Modified
2025-04-15
First seen
2026-08-07
Aliases
EUVD-2021-27596, GHSA-CQ27-9FXQ-2G57
Products
n/a:n/a n/a
Sources
euvd EUVD-2021-27596

Description

A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability.

References