{"uuid": "5e3fe286-dc24-4979-a4ef-354b8fd05a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40149", "type": "seen", "source": "https://t.me/hacking_Attack/56331", "content": "Exploit Collector\nReolink E1 Zoom Camera 3.0.0.716 Private Key Disclosure\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \nReolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a private key disclosure vulnerability.\n\nSHA-256 | 6a0bd039c1f58f660697b01a27d1512dbd2ffb57a9229991176f80a78cd66c64\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Reolink E1 Zoom Camera\nVendor URL:     https://reolink.com/product/e1-zoom/\nType:           Exposure of Sensitive Information to an Unauthorized Actor [CWE-200]\nDate found:     2021-08-26\nDate published: 2022-06-01\nCVSSv3 Score:   7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\nCVE:            CVE-2021-40149\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nReolink E1 Zoom Camera 3.0.0.716 (latest) and below\n4. INTRODUCTION\n===============\nMeet new generation of Reolink E1 series. Advanced features - 5MP Super\nHD & optical zoom are added into this compact camera. Plus two-way audio,\nremote live view and more smart capacities help you connect with what you\ncare. Be closer to families and be away from worries.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private\nkey via the root web server directory.\n\nAn unauthenticated attacker can abuse this with network-level access to the\ncamera to download the webserver's private SSL key by simply going to the\nfollowing URL:\n\nhttp://[CAM-IP]/self.key\n6. RISK\n=======\nAn unauthenticated attacker can download the webserver's SSL private key and\nthereby attack the encrypted network traffic to and from the camera, which might\nlead to the disclosure of the administrative access credentials and other\nsensitive information.\n7. SOLUTION\n===========\nNone.\n8. REPORT TIMELINE\n==================\n2021-08-26: Discovery of the vulnerability\n2021-08-26: Sent notification to Reolink via their support channel\n2021-08-26: Response from vendor asking for vulnerability details\n2021-08-26: Sent all the vulnerability details\n2021-08-31: Vendor is still looking into the issue\n2021-09-03: Vendor states that the issue will be fixed by the end of September.\n2021-10-01: Since no firmware has been released, we've sent another notification\n2021-10-02: Vendor states that the new firmware is delayed\n2022-02-01: Since there is still fix, sent another notification\n2022-02-02: Vendor states that the firmware with the fix hasn't been released yet.\n2022-03-03: Since there is still fix, sent another notification\n2022-03-12: Vendor states they're still working on the issue (internal update awaits testing)\n2022-05-24: Since there is still fix, sent another notification\n2022-05-24: Vendor states that the update still hasn't been released yet.\n2022-06-01: Almost a year should be enough to fix this. Public disclosure.\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:47.662282Z"}