CVE-2021-40150

HIGH NUCLEI

E1 Zoom camera <3.0.0.716 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-40150 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.

Nuclei Templates (1)

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure
HIGHVERIFIEDby For3stCo1d
Shodan: http.title:"Reolink" || http.title:"reolink"
FOFA: title="reolink"

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0325
EPSS Percentile 86.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-552
Status published
Products (1)
reolink/e1_zoom_firmware < 3.0.0.716
Published Jul 17, 2022
Tracked Since Feb 18, 2026