CVEvulnerability
CVE-2020-25169
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-319
Description
The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.
Affected configurations
• reolink rln8-410 firmware
• reolink rlc-422 firmware
• reolink rlc-510a firmware
• reolink rlc-410 firmware
• reolink rlc-423s firmware
• reolink rlc-423 firmware
• reolink rlc-520a firmware
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02 Third Party Advisory, US Government Resource
- https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02 Third Party Advisory, US Government Resource