Filtered by vendor Reolink Subscriptions
Filtered by product E1 Zoom Firmware Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-40149 1 Reolink 2 E1 Zoom, E1 Zoom Firmware 2022-07-27 5.9 Medium
The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.
CVE-2021-40150 1 Reolink 2 E1 Zoom, E1 Zoom Firmware 2022-07-22 7.5 High
The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.