{"id":"01M6MYE2CR4P5ZSE0S5JCNGPSM","product_id":"01M6MYE22E5AJJJWHZ7QX4XFS0","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"RCE Security reported CVE-2021-40150 in E1 Zoom firmware through 3.0.0.716: network access allowed unauthenticated download of web-server configuration files.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Reolink E1 Zoom configuration disclosure (CVE-2021-40150)","url":"https://www.rcesecurity.com/advisories/cve-2021-40150/","publisher":"RCE Security","publishedAt":"2022-06-01"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Retained the narrow disclosed issue; removed credential-disclosure implication and present-day patch assumptions. This is not independent device verification.","created_at":1793851853208,"updated_at":1793917832000,"slug":"reolink-e1-zoom","vendor":"Reolink","model":"E1 Zoom","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE2CR4P5ZSE0S5JCNGPSM","product_url":"https://isitspying.com/p/reolink-e1-zoom","findings":[{"id":"accuracy:01M6MYE2CR4P5ZSE0S5JCNGPSM:0","report_id":"01M6MYE2CR4P5ZSE0S5JCNGPSM","kind":"known_cve","severity":"medium","detail":"CVE-2021-40150: configuration-file disclosure; researcher CVSS 3.0 score 5.3. Credential disclosure was not established.","ai_model":null}],"contacted_hosts":[],"evidence":[]}