CVE-2020-25169 Reolink P2P Cameras

2021-01-2612:46:09

CWE-319

icscert

www.cve.org

data protection

reolink cameras

information security

EPSS

0.002

Percentile

52.9%

JSON

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.

CNA Affected

[
  {
    "product": "RLC-4XX series",
    "vendor": "Reolink",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "RLC-5XX series",
    "vendor": "Reolink",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "RLN-X10 series",
    "vendor": "Reolink",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-019-02

EPSS

0.002

Percentile

52.9%

JSON

Related for CVELIST:CVE-2020-25169