CVE-2020-25169: Reolink P2P Cameras

Reference Links

• https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02
• https://www.cisa.gov/news-events/ics-advisories/icsa-21-019-02 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-21-019-02

Frequently Asked Questions

• What is CVE-2020-25169?

  CVE-2020-25169 is a vulnerability that affects Reolink P2P products and allows attackers to access sensitive information, such as camera feeds, by exploiting the insufficient protection of data transferred between the local device and Reolink servers.

• How does CVE-2020-25169 affect Reolink P2P products?

  CVE-2020-25169 affects Reolink P2P products by compromising the protection of data transferred between the local device and Reolink servers, enabling attackers to gain access to sensitive information.

• What is the severity of CVE-2020-25169?

  CVE-2020-25169 has a severity rating of 7.5 (High).

• Which Reolink P2P products are affected by CVE-2020-25169?

  Reolink P2P products such as Reolink Rln8-410 Firmware, Reolink Rlc-422 Firmware, Reolink Rlc-510a Firmware, Reolink Rlc-410 Firmware, Reolink Rlc-423s Firmware, and Reolink Rlc-423 Firmware are affected by CVE-2020-25169.

• Are all Reolink P2P products vulnerable to CVE-2020-25169?

  No, not all Reolink P2P products are vulnerable to CVE-2020-25169. Some products like Reolink Rln8-410, Reolink Rlc-422, Reolink Rlc-510a, Reolink Rlc-410, Reolink Rlc-423s, and Reolink Rlc-423 are not vulnerable.