CVE-2021-40410

ALTO 7.2CVE-2021-40410 · Published 28/01/2022 · updated 17/06/2026

En resumen

CVE-2021-40410 es una vulnerabilidad ALTO (CVSS 7.2).
Probabilidad de explotación en los próximos 30 días (EPSS): 27.9%, mayor que el 98.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [4] the dns_data->dns1 variable, that has the value of the dns1 parameter provided through the SetLocal API, is not validated properly. This would lead to an OS command injection.

References

talosintelligence.com/vulnerability_reports/TALOS-2021-1424 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free