CVE-2021-40149

PoC ×3—

CVSS 3.1

5.9 medium

EPSS

8%p94

Published

Jul 17, 2022 (Jul 17, 2022)

Modified

Jun 17, 2026

Description

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.

Vendors: reolink
Products: e1 zoom firmware
Weakness: CWE-552
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.9%)

In the news0 stories

No ingested article mentions this CVE yet.