← Back

E1 Zoom Firmware

e1_zoom_firmware

Vendor: Reolink • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-40150
1Reolink
1E1 Zoom Firmware
Jun 17, 2026
Jul 17, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI conf...Show more
The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI.Show less
CVE-2021-40149
1Reolink
1E1 Zoom Firmware
Jun 17, 2026
Jul 17, 2022
N/A· v4
5.9 MEDIUM· v3
N/A· v2
The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.