CVE-2021-40414
Published: 28 January 2022
Summary
CVE-2021-40414 is a high-severity Improper Access Control (CWE-284) vulnerability in Reolink Rlc-410W Firmware. Its CVSS base score is 7.1 (High).
Operationally, ranked at the 43.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-27591
Vulnerability details
An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RLC-410W v3.0.0.136_20121102. The SetMdAlarm API sets the movement detection parameters, giving the ability to set the sensitivity of the camera per a range of hours, and which…
more
of the camera spaces to ignore when considering movement detection. Because in cgi_check_ability the SetMdAlarm API does not have a specific case, the user permission will default to 7. This will give non-administrative users the possibility to change the movement detection parameters.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
The access control policy and procedures directly mandate and enforce proper access control mechanisms across the organization.
Guides setting of default permissions to the minimum required level.
Defines roles, responsibilities, and access rules for configuration management activities, making improper access to configuration resources harder to exploit.
Baseline includes documented access control settings that are reviewed and maintained, reducing the ability to exploit improper access control.
Requiring the most restrictive settings instead of defaults prevents incorrect default permissions on resources.
Explicitly requires protecting the configuration management plan from unauthorized disclosure and modification.
The policy defines and enforces restrictions on physical access to resources, directly reducing improper access control.
Tailoring explicitly overrides or scopes default permission assignments in the baseline to match the system's actual risk and operational needs.