CVE-2025-55624

MEDIUM

Reolink <4.54.0.4.20250526 - SSRF

Title source: llm

Description

An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public components.

References (1)

[Exploit, Third Party Advisory] https://relieved-knuckle-264.notion.site/Reolink-Intent-Redirection-21a43700364280cabb8bcce817ab1879?pvs=143

Scores

CVSS v3 5.3

EPSS 0.0006

EPSS Percentile 18.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-601

Status published

Products (1)

reolink/reolink 4.54.0.4.20250526

Published Aug 22, 2025

Tracked Since Feb 18, 2026