Secuno
ENNL
Book demo

CVE-2021-40407

Reolink RLC-410W IP Camera OS Command Injection Vulnerability

7.2 HIGHActively exploited (CISA KEV)Public exploitEPSS 47.6%
  1. Published28 Jan 2022
  2. Added to CISA KEV18 Dec 2024
  3. Remediation due8 Jan 2025
Actively exploited (CISA KEV)

Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.

Added to KEV: 18 Dec 2024Federal remediation due: 8 Jan 2025

Description

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredHigh
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Reolink Rlc-410w Firmware3.0.0.136_20121102

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-185298.7
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is…
CVE-2025-714299.8
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in…
CVE-2020-372798.1
easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that…
CVE-2026-1093188.8
Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that…
CVE-2026-1088969.9
A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function…
CVE-2026-1088959.9
A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is…

Frequently asked

Is CVE-2021-40407 being actively exploited?

Yes. CVE-2021-40407 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 18 Dec 2024.

How severe is CVE-2021-40407?

CVE-2021-40407 has a CVSS 3.1 base score of 7.2, rated high. EPSS estimates a 47.6% probability of exploitation.

Which products are affected by CVE-2021-40407?

Affected products include Reolink Rlc-410w Firmware.

How do I fix CVE-2021-40407?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2021-40407 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.