{"vulnerability": "cve-2021-40150", "sightings": [{"uuid": "8c6086c8-9576-4cc6-9ba9-8df9ba63edf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40150", "type": "seen", "source": "https://t.me/cibsecurity/46417", "content": "\u203c CVE-2021-40150 \u203c\n\nThe web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-18T02:33:33.000000Z"}, {"uuid": "354a2138-925e-4ca5-9f8b-77e3eff79190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40150", "type": "seen", "source": "https://t.me/hacking_Attack/56332", "content": "Exploit Collector\nReolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nReolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a configuration disclosure vulnerability.\n\nSHA-256 | ba600aa8322c82ebd04618aeda4cdc9a22917520900038fa00529aee1c78ebb1\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Reolink E1 Zoom Camera\nVendor URL:     https://reolink.com/product/e1-zoom/\nType:           Exposure of Sensitive Information to an Unauthorized Actor [CWE-200]\nDate found:     2021-08-26\nDate published: 2022-06-01\nCVSSv3 Score:   5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2021-40150\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nReolink E1 Zoom Camera 3.0.0.716 (latest) and below\n4. INTRODUCTION\n===============\nMeet new generation of Reolink E1 series. Advanced features - 5MP Super HD\n& optical zoom are added into this compact camera. Plus two-way audio, remote\nlive view and more smart capacities help you connect with what you care. Be\ncloser to families and be away from worries.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration\nvia the /conf/ directory that is mapped to a publicly accessible path.\n\nAn unauthenticated attacker can abuse this with network-level access to the\ncamera to download the entire NGINX/FastCGI configurations by querying, i.e.:\n\nhttp://[CAM-IP]/conf/nginx.conf\nhttp://[CAM-IP]/conf/fastcgi.conf\n\nEtc.\n6. RISK\n=======\nAn unauthenticated attacker can download the webserver's configuration files\nwhich might lead to sensitive information disclosure.\n7. SOLUTION\n===========\nNone.\n8. REPORT TIMELINE\n==================\n2021-08-26: Discovery of the vulnerability\n2021-08-26: Sent notification to Reolink via their support channel\n2021-08-26: Response from vendor asking for vulnerability details\n2021-08-26: Sent all the vulnerability details\n2021-08-31: Vendor is still looking into the issue\n2021-09-03: Vendor states that the issue will be fixed with the next firmware update by the end of September.\n2021-10-01: Since no firmware has been released, we've sent another notification\n2021-10-02: Vendor states that the new firmware is delayed\n2022-02-01: Since there is still fix, sent another notification\n2022-02-02: Vendor states that the firmware with the fix hasn't been released yet.\n2022-03-03: Since there is still fix, sent another notification\n2022-03-12: Vendor states they're still working on the issue (internal update awaits testing)\n2022-05-24: Since there is still fix, sent another notification\n2022-05-24: Vendor states that the update still hasn't been released yet.\n2022-06-01: Almost a year should be enough to fix this. Public disclosure.\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.190152Z"}, {"uuid": "b85cd247-40dc-465c-9dd8-30a8c30d790d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40150", "type": "seen", "source": "https://t.me/hacking_Attack/56332", "content": "Exploit Collector\nReolink E1 Zoom Camera 3.0.0.716 Configuration Disclosure\n\nhttps://1.bp.blogspot.com/-luFAqsulr64/WWlvFAfKXLI/AAAAAAAAILI/M2y6qJlcju8Kpq9V68KpSF2h6FJoaSeWACLcBGAs/s1600/h135.png \nReolink E1 Zoom Camera versions 3.0.0.716 and below suffer from a configuration disclosure vulnerability.\n\nSHA-256 | ba600aa8322c82ebd04618aeda4cdc9a22917520900038fa00529aee1c78ebb1\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Reolink E1 Zoom Camera\nVendor URL:     https://reolink.com/product/e1-zoom/\nType:           Exposure of Sensitive Information to an Unauthorized Actor [CWE-200]\nDate found:     2021-08-26\nDate published: 2022-06-01\nCVSSv3 Score:   5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\nCVE:            CVE-2021-40150\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nReolink E1 Zoom Camera 3.0.0.716 (latest) and below\n4. INTRODUCTION\n===============\nMeet new generation of Reolink E1 series. Advanced features - 5MP Super HD\n& optical zoom are added into this compact camera. Plus two-way audio, remote\nlive view and more smart capacities help you connect with what you care. Be\ncloser to families and be away from worries.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration\nvia the /conf/ directory that is mapped to a publicly accessible path.\n\nAn unauthenticated attacker can abuse this with network-level access to the\ncamera to download the entire NGINX/FastCGI configurations by querying, i.e.:\n\nhttp://[CAM-IP]/conf/nginx.conf\nhttp://[CAM-IP]/conf/fastcgi.conf\n\nEtc.\n6. RISK\n=======\nAn unauthenticated attacker can download the webserver's configuration files\nwhich might lead to sensitive information disclosure.\n7. SOLUTION\n===========\nNone.\n8. REPORT TIMELINE\n==================\n2021-08-26: Discovery of the vulnerability\n2021-08-26: Sent notification to Reolink via their support channel\n2021-08-26: Response from vendor asking for vulnerability details\n2021-08-26: Sent all the vulnerability details\n2021-08-31: Vendor is still looking into the issue\n2021-09-03: Vendor states that the issue will be fixed with the next firmware update by the end of September.\n2021-10-01: Since no firmware has been released, we've sent another notification\n2021-10-02: Vendor states that the new firmware is delayed\n2022-02-01: Since there is still fix, sent another notification\n2022-02-02: Vendor states that the firmware with the fix hasn't been released yet.\n2022-03-03: Since there is still fix, sent another notification\n2022-03-12: Vendor states they're still working on the issue (internal update awaits testing)\n2022-05-24: Since there is still fix, sent another notification\n2022-05-24: Vendor states that the update still hasn't been released yet.\n2022-06-01: Almost a year should be enough to fix this. Public disclosure.\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:47.716079Z"}]}