Browse CVEs

MEDIUM 5.1 CVE-2025-56802 The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with loca… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 6.5 CVE-2025-56799 Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. N… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 5.1 CVE-2025-56800 Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements lock screen password l… Reolink No fix yet Fix from $1,6002025-10-21 MEDIUM 5.1 CVE-2025-56801 The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation all… Reolink No fix yet Fix from $1,6002025-10-21 CRITICAL 9.8 CVE-2025-55637 Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerabili… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware Mitigation only Fix from $2,3002025-08-22 HIGH 7.5 CVE-2025-55634 Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 a… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware No fix yet Fix from $1,9502025-08-22 HIGH 7.3 CVE-2025-55630 A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662… Smart 2k\+ Plug In Wi Fi Video Doorbell With Chime Firmware No fix yet Fix from $1,9502025-08-22 MEDIUM 6.3 CVE-2025-55625 An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is … Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 5.3 CVE-2025-55624 An intent redirection vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access internal functions or access non-public com… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-55621 An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other use… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-55622 Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is dispute… Reolink No fix yet Fix from $1,6002025-08-22 MEDIUM 5.4 CVE-2025-55623 An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB (Android Debug Bridge). Reolink No fix yet Fix from $1,6002025-08-22 CRITICAL 9.8 CVE-2025-55619 Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerabilit… Reolink Mitigation only Fix from $2,3002025-08-22 MEDIUM 6.1 CVE-2025-55620 A cross-site scripting (XSS) vulnerability in the valuateJavascript() function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary we… Reolink No fix yet Fix from $1,6002025-08-22 HIGH 7.5 CVE-2021-40150 The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible p… E1 Zoom Firmware after 3.0.0.716 Fix from $1,9502022-07-17 MEDIUM 5.9 CVE-2021-40149EPSS 7% The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can d… E1 Zoom Firmware after 3.0.0.716 Fix from $1,6002022-07-17 HIGH 7.5 CVE-2021-44354 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44355 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44356 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44357 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44366 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44375 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 HIGH 7.5 CVE-2021-44394 Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A sp… Rlc 410w Firmware No fix yet Fix from $1,9502022-04-14 MEDIUM 6.5 CVE-2021-40405 A denial of service vulnerability exists in the cgiserver.cgi Upgrade API functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted … Rlc 410w Firmware No fix yet Fix from $1,6002022-04-14 HIGH 7.7 CVE-2021-44413 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44414 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44415 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44416 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44417 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28 HIGH 7.7 CVE-2021-44418 A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-… Rlc 410w Firmware No fix yet Fix from $1,9502022-01-28