← Database

CVE-2022-21199

MEDIUM CVSS: 5.9 Published: 2022-01-28 Modified: 2026-06-17

Description

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected Platforms

Reolink Rlc-410W FirmwareReolink Rlc-410W

Weakness Type

CWE-321, CWE-798

References