Browse CVEs

MEDIUM 5.1 CVE-2025-56802 The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with loca… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 6.5 CVE-2025-56799 Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. N… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 5.1 CVE-2025-56800 Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements lock screen password l… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 5.1 CVE-2025-56801 The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation all… Reolink No fix yet Fix from $1,6002025-10-21 CRITICAL 9.8 CVE-2025-55637 Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerabili… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware Mitigation only Fix from $2,3002025-08-22 HIGH 7.5 CVE-2025-55634 Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 a… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware No fix yet Fix from $1,9502025-08-22 HIGH 7.3 CVE-2025-55630 A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware No fix yet Fix from $1,9502025-08-22 MEDIUM 6.3 CVE-2025-55625 An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is … Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 5.3 CVE-2025-55624 An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public com… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-55621 An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other use… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-55622 Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is dispute… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 5.4 CVE-2025-55623 An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debug Bridge). Reolink No fix yet Fix from $1,6002025-08-22 CRITICAL 9.8 CVE-2025-55619 Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerabilit… Reolink Mitigation only Fix from $2,3002025-08-22 MEDIUM 6.1 CVE-2025-55620 A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary we… Reolink No fix yet Fix from $1,6002025-08-22 HIGH 7.5 CVE-2021-44354 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44355 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44356 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44357 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44366 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44375 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44394 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 MEDIUM 6.5 CVE-2021-40405 A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted … Rlc 410w Firmware No fix yet Fix from $1,6002022-04-14 HIGH 7.7 CVE-2021-44413 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44414 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44415 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44416 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44417 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44418 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44419 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44391 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28