Vulnerabilities > Reolink > RLC 410W Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-01-28 CVE-2022-21217 Out-of-bounds Write vulnerability in Reolink Rlc-410W Firmware 3.0.0.13620121102
An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102.
network
low complexity
reolink CWE-787
critical
9.8
2019-04-08 CVE-2019-11001 OS Command Injection vulnerability in Reolink products
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.
network
low complexity
reolink CWE-78
critical
9.0