Actively exploited · Published Jan 28, 2022 · Assigned by talos
CVE-2021-40407
Critical 9.1 Exploited
In plain English
A critical-severity OS command injection in RLC-410W IP Camera from Reolink. Attackers are actively exploiting it in the wild (listed by CISA on December 18, 2024). The chance it is exploited in the next 30 days is estimated at 47.6% (higher than 99% of all known vulnerabilities). The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
CISA guidance
The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
Federal agencies must remediate by Jan 8, 2025.
Official description
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H