CVE-2022-21134

A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability.

• CWE-347
• CWE-347

• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447Broken Link, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1447Broken Link, Third Party Advisory

Published

Jan 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21129Versions of the package nemo-appium before 0.0.9 are vulnera…9.8
• CVE-2022-2113Cross-site Scripting (XSS) - Stored in GitHub repository inv…5.4
• CVE-2022-21130Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-21131Improper access control for some Intel(R) Xeon(R) Processors…5.5
• CVE-2022-21132Directory traversal vulnerability in pfSense-pkg-WireGuard p…6.5
• CVE-2022-21133Out-of-bounds read in the Intel(R) Trace Analyzer and Collec…5.5
• CVE-2022-21135Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-21136Improper input validation for some Intel(R) Xeon(R) Processo…5.5
• CVE-2022-21137Omron CX-One Versions 4.60 and prior are vulnerable to a sta…7.8
• CVE-2022-21138Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-21139Inadequate encryption strength for some Intel(R) PROSet/Wire…8.8
• CVE-2022-2114The Data Tables Generator by Supsystic WordPress plugin befo…4.8