Reolink RLN8-410 Firmware vulnerabilities

2 CVEs affecting Reolink RLN8-410 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25173, published 2021-01-26.

More from Reolink.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-25169, published 2021-01-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera…
• CVE-2020-25173, published 2021-01-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access