What is CVE-2020-25169?

CVE-2020-25169 is a high-severity vulnerability in Reolink Rlc-410, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2021-01-26.

How severe is CVE-2020-25169?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Reolink Rlc-410

CVE-2020-25169

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.

EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Reolink Rlc-410
Reolink Rlc-410_firmware
Reolink Rlc-422
Reolink Rlc-422_firmware
Reolink Rlc-423
Reolink Rlc-423_firmware
Reolink Rlc-423s
Reolink Rlc-423s_firmware
Reolink Rlc-4xx Series — versions All versions
Reolink Rlc-510a

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-25169?: CVE-2020-25169 is a high-severity vulnerability in Reolink Rlc-410, classified under Cleartext Transmission of Sensitive Information. CVSS score: 7.5/10. Published 2021-01-26.
How severe is CVE-2020-25169?: High severity. CVSS v3 base score is 7.5 out of 10.