.. / CVE-2021-40150

Exploit for Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure (CVE-2021-40150)

Description:

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.

Nuclei Template

View the template here CVE-2021-40150.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40150.yaml
Copy

References:

https://github.com/ARPSyndicate/cvemon
https://nvd.nist.gov/vuln/detail/CVE-2021-40150
https://dl.packetstormsecurity.net/2206-exploits/reolinke1config-disclose.txt
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40150
https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2021-40150.txt