CVE-2021-40413 Missing authorization in n/a
Incorrect default permissions in the firmware upgrade API allow attackers to bypass authorization checks and potentially execute arbitrary code via crafted HTTP requests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-40413?
CVE-2021-40413 is a high-severity missing authorization vulnerability in Reolink Rlc-410w Firmware, published on 28 Jan 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. The UpgradePrepare is the API that checks if a provided filename identifies a new version of the RLC-410W firmware. If the version is new, it would be possible, allegedly, to later on perform the Upgrade. An attacker can send an HTTP request to trigger this vulnerability.
Which versions are affected by CVE-2021-40413?
It affects 1 product.
Products include Reolink Rlc-410w Firmware.
How do I fix CVE-2021-40413?
No fix has been published for CVE-2021-40413 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2021-40413 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-40413 exists.
Other vulnerabilities in Reolink Rlc-410w Firmware
Sources
Also known as GHSA-h2j2-qx54-6hmh.