CVE-2021-40414:Incorrect default permission vulnerability in Reolink RLC-410W camera allows non-administrative users to modify movement detection parameters.

splash
Back

Description Preview

A vulnerability exists in the Reolink RLC-410W v3.0.0.136_20121102 camera's cgiserver.cgi component, specifically in the cgi_check_ability functionality. The SetMdAlarm API, which controls movement detection parameters, lacks proper permission checks. Due to this oversight, the user permission level defaults to 7, allowing non-administrative users to modify critical motion detection settings including sensitivity levels and detection zones. This could potentially be exploited to disable or manipulate security monitoring capabilities.

Overview

The vulnerability (CVE-2021-40414) affects the Reolink RLC-410W security camera running firmware version v3.0.0.136_20121102. The issue stems from incorrect default permissions in the cgiserver.cgi component's cgi_check_ability functionality. When handling the SetMdAlarm API, which is responsible for configuring motion detection parameters, the system does not properly restrict access to administrative users. Instead, it assigns a default permission level of 7, which grants access to non-administrative users. This allows unauthorized users to modify critical security settings such as motion detection sensitivity and detection zones across different time periods. An attacker could potentially exploit this vulnerability to disable motion detection in specific areas or time ranges, undermining the security monitoring capabilities of the camera.

Remediation

  1. Update to the latest firmware version if Reolink has released a patch addressing this vulnerability.
  2. Implement network segmentation to restrict access to the camera's web interface.
  3. Use strong, unique passwords for all user accounts.
  4. Disable remote access to the camera if not required.
  5. Monitor for unauthorized access attempts or unexpected changes to motion detection settings.
  6. Consider implementing additional security controls such as a firewall or VPN for accessing the camera remotely.
  7. Contact Reolink support for specific guidance on mitigating this vulnerability if a patch is not available.

References

  1. Cisco Talos Intelligence Group Vulnerability Report: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1425
  2. Common Weakness Enumeration (CWE-276): Incorrect Default Permissions - https://cwe.mitre.org/data/definitions/276.html
  3. MITRE CVE Entry: CVE-2021-40414

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Accommodation & Food Services
    Accommodation & Food Services
  2. Administrative, Support, Waste Management & Remediation Services
    Administrative, Support, Waste Management & Remediation Services
  3. Agriculture, Forestry Fishing & Hunting
    Agriculture, Forestry Fishing & Hunting
  4. Arts, Entertainment & Recreation
    Arts, Entertainment & Recreation
  5. Construction
    Construction
  6. Educational Services
    Educational Services
  7. Finance and Insurance
    Finance and Insurance
  8. Health Care & Social Assistance
    Health Care & Social Assistance
  9. Information
    Information
  10. Management of Companies & Enterprises
    Management of Companies & Enterprises
  11. Manufacturing
    Manufacturing
  12. Mining
    Mining
  13. Other Services (except Public Administration)
    Other Services (except Public Administration)
  14. Professional, Scientific, & Technical Services
    Professional, Scientific, & Technical Services
  15. Public Administration
    Public Administration
  16. Real Estate Rental & Leasing
    Real Estate Rental & Leasing
  17. Retail Trade
    Retail Trade
  18. Transportation & Warehousing
    Transportation & Warehousing
  19. Utilities
    Utilities
  20. Wholesale Trade
    Wholesale Trade

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background
Armis Vulnerability Intelligence Database