Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-56801. PoCs published by adminlove520.
AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2025-56801, a vulnerability in the Reolink Desktop Application (version 8.18.12) where the AES-CFB IV is effectively hardcoded, leading to weak encryption. The writeup includes code snippets, PoC steps, and cryptographic analysis.
Description
The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
Exploits (1)
The repository provides a detailed technical analysis of CVE-2025-56801, a vulnerability in the Reolink Desktop Application (version 8.18.12) where the AES-CFB IV is effectively hardcoded, leading to weak encryption. The writeup includes code snippets, PoC steps, and cryptographic analysis.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L