CVE-2021-40407

Reolink RLC-410W IP Camera OS Command Injection Vulnerability — Reolink / RLC-410W IP Camera

Risk tier: Monitored

Description

Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.

NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.

Scoring

  • CVSS: Not yet available
  • EPSS exploitation probability: Not yet available
  • EPSS percentile: Not yet available

CISA KEV status

  • Added to KEV: 2024-12-18
  • Remediation due date: 2025-01-08
  • Known ransomware campaign use: Unknown

All exploited vulnerabilities