← Back to CVE List

CVE-2021-40411

Published: 2022-01-28T20:15Z
Last Modified: 2024-11-21T06:24Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This would lead to an OS command injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt