Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-56802. PoCs published by adminlove520, shinyColumn.
AI-analyzed exploit summary The repository contains a functional PoC for CVE-2025-56802, which exploits a hard-coded cryptographic key vulnerability in the Reolink Desktop Application (version 8.18.12). The PoC decrypts sensitive configuration files by leveraging a predictable key derivation process involving MD5 hashing and a static IV.
Description
The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
Exploits (2)
The repository contains a functional PoC for CVE-2025-56802, which exploits a hard-coded cryptographic key vulnerability in the Reolink Desktop Application (version 8.18.12). The PoC decrypts sensitive configuration files by leveraging a predictable key derivation process involving MD5 hashing and a static IV.
The repository contains a functional PoC for CVE-2025-56802, demonstrating how to decrypt sensitive configuration files in the Reolink Desktop Application due to insecure AES-CFB key generation. The PoC extracts the hardcoded key and IV, decrypts the configuration file, and outputs the sensitive data.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L