Vulnerability · Published Jan 26, 2021 · Assigned by icscert
CVE-2020-25169Reolink P2P Cameras
High 7.5
In plain English
A high-severity security flaw in RLC-4XX series from Reolink. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.0%top 36.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Reolink | RLC-4XX series | All versions |
| Reolink | RLC-5XX series | All versions |
| Reolink | RLN-X10 series | All versions |
Weakness: CWE-319
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02 x_refsource_MISC