e1_zoom_firmware 漏洞

高危CVE-2021-401502022/07/17

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.

Reolink e1_zoom_firmwarePoC 已收录

CVSS7.5EPSS 50.8%

中危CVE-2021-401492022/07/17

Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure

Reolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a private key (RSA) disclosure vulnerability.

Reolink e1_zoom_firmwarePoC 已收录

CVSS5.9EPSS 78.6%

e1_zoom_firmware

关联漏洞

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure

Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure