CVE-2020-25169 Vulnerability Details

  /     /     /  

CVE-2020-25169 Metadata Quick Info

CVE Published: 26/01/2021 | CVE Updated: 16/09/2024 | CVE Year: 2020
Source: icscert | Vendor: Reolink | Product: RLC-4XX series
Status : PUBLISHED

---

CVE-2020-25169 Description

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-319
CWE Name: CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319
Source: Reolink

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).