Skip to content
OpenAdvisories
High · 7.5 CVE-2022-21199 EUVD-2022-26433GHSA-8vx7-65jm-cwq7

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted ma…

Published Jan 28, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

References