Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-40150

The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Reolink
Products
E1 Zoom E1 Zoom Firmware
CVE-2021-40149

The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.

CVSS 3.1 · 5.9 Medium EPSS 8.3% KEV · Not listed
Vendors
Reolink
Products
E1 Zoom E1 Zoom Firmware