Vulnerabilities > CVE-2021-40149 - Files or Directories Accessible to External Parties vulnerability in Reolink E1 Zoom Firmware 3.0.0.716

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
high complexity
reolink
CWE-552
NVD
Published: 2022-07-17
Updated: 2024-11-21

Summary

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.

Vulnerable Configurations

Part Description Count
OS
Reolink
2
Hardware
Reolink
1

Common Weakness Enumeration (CWE)

References