Critical ICSA-21-019-02 2 CVEs

Reolink P2P Cameras

Published Jan 19, 2021 · Updated Jan 19, 2021

Vendor: Reolink Product: P2P protocol

Summary

Successful exploitation of these vulnerabilities could permit unauthorized access to sensitive information.

Vulnerabilities 2

Unscored —

CVE-2020-25169

Reolink P2P Cameras

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.

Reolink RLC-5XX series RLC-4XX series RLN-X10 series

Jan 26, 2021
Unscored —

CVE-2020-25173

Reolink P2P Cameras

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access

Reolink RLN-X10 series RLC-5XX series RLC-4XX series

Jan 26, 2021

Revision history

2021-01-19 #1
ICSA-21-019-02 Reolink P2P Cameras

References

ICS Advisory ICSA-21-019-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-019-02
Recommended Practices
https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B