Known vulnerabilities in RLC-410W - page 3

Vendor: Reolink
Software: RLC-410W
Software CPE: cpe:2.3:h:reolink:rlc-410w:*:*:*:*:*:*:*:*
Website: https://reolink.com/
Total vulnerabilities: 66
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting RLC-410W RLC-410W is affected by 66 known vulnerabilities: 49 high, 10 medium, 7 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60161 - Improper input validation
CVE-2021-44398		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60160 - Improper input validation
CVE-2021-44397		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60159 - Improper input validation
CVE-2021-44396		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60158 - Improper input validation
CVE-2021-44395		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60157 - Improper input validation
CVE-2021-44394		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60156 - Improper input validation
CVE-2021-44393		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60155 - Improper input validation
CVE-2021-44392		 CWE-20 High
No
No
 - 28.01.2022 SB2022012706
#VU60077 - Active Debug Code
CVE-2021-40419		 CWE-489 High
No
No
 - 27.01.2022 SB2022012706
#VU60076 - Improper input validation
CVE-2022-21796		 CWE-20 High
No
No
 - 27.01.2022 SB2022012706
#VU60075 - Resource exhaustion
CVE-2021-40406		 CWE-400 Medium
No
No
 - 27.01.2022 SB2022012706
#VU60074 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21236		 CWE-200 Medium
No
No
 - 27.01.2022 SB2022012706
#VU60073 - Improper Access Control
CVE-2021-40404		 CWE-284 Medium
No
No
 - 27.01.2022 SB2022012706
#VU60072 - Improper Verification of Cryptographic Signature
CVE-2022-21134		 CWE-347 High
No
No
 - 27.01.2022 SB2022012706
#VU60071 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-40412		 CWE-78 Low
No
No
 - 27.01.2022 SB2022012706
#VU60069 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-40410		 CWE-78 Low
No
No
 - 27.01.2022 SB2022012706
#VU60068 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-40409		 CWE-78 Low
No
No
 - 27.01.2022 SB2022012706
#VU60061 - Improper Access Control
CVE-2021-40405		 CWE-284 Medium
No
No
 - 27.01.2022 SB2022012706
#VU60060 - Out-of-bounds write
CVE-2022-21217		 CWE-787 Low
No
No
 - 27.01.2022 SB2022012706
#VU60059 - Integer overflow
CVE-2022-21801		 CWE-190 High
No
No
 - 27.01.2022 SB2022012706
#VU60058 - Use of Hard-coded Cryptographic Key
CVE-2022-21199		 CWE-321 Medium
No
No
 - 27.01.2022 SB2022012706


Showing elements 41 - 60 out of 66