CVE-2020-25173
26.01.2021, 18:15
An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network accessEnginsight
| Vendor | Product | Version |
|---|---|---|
| reolink | rln8-410_firmware | - |
| reolink | rlc-422_firmware | - |
| reolink | rlc-510a_firmware | - |
| reolink | rlc-423s_firmware | - |
| reolink | rlc-423_firmware | - |
| reolink | rlc-410_firmware | - |
| reolink | rlc-520a_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-321 - Use of Hard-coded Cryptographic KeyThe use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
- CWE-798 - Use of Hard-coded CredentialsThe software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.