CVE-2020-25169 Reolink P2P Cameras
Attackers can intercept sensitive camera feed data due to insufficient protection of data transferred between local devices and Reolink servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25169?
CVE-2020-25169 is a high-severity vulnerability in Reolink RLC-4XX series, published on 26 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.
Weakness: CWE-319
Which versions are affected by CVE-2020-25169?
It affects 7 products.
Products include Reolink Rlc-410 Firmware, Reolink Rlc-422 Firmware, Reolink Rlc-423 Firmware, Reolink Rlc-423s Firmware, Reolink Rlc-510a Firmware, Reolink Rlc-520a Firmware and 1 more.
How do I fix CVE-2020-25169?
No fix has been published for CVE-2020-25169 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25169 being exploited?
There is no known exploitation of CVE-2020-25169 in the wild and no public exploit code.
Other vulnerabilities in Reolink RLC-4XX series
Sources
Also known as GHSA-69qh-6j8v-ppx3.