CVE-2025-56801
MEDIUMReolink Desktop App 8.18.12 - Info Disclosure
Title source: llmDescription
The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
Exploits (1)
github
WRITEUP
2 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-56801
Scores
CVSS v3
5.1
EPSS
0.0003
EPSS Percentile
8.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Details
CWE
CWE-321
Status
published
Products (1)
reolink/reolink
8.18.12
Published
Oct 21, 2025
Tracked Since
Feb 18, 2026