CVE-2020-25169

HIGH

Reolink P2P Firmware - Cleartext Transmission of Sensitive Information

Title source: llm

Description

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02

Scores

CVSS v3 7.5

EPSS 0.0099

EPSS Percentile 57.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-319

Status published

Products (7)

reolink/rlc-410_firmware

reolink/rlc-422_firmware

reolink/rlc-423_firmware

reolink/rlc-423s_firmware

reolink/rlc-510a_firmware

reolink/rlc-520a_firmware

reolink/rln8-410_firmware

Published Jan 26, 2021

Tracked Since Feb 18, 2026