Description
Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value.
Medium · 6.5
CVE-2025-55629
EUVD-2025-25601GHSA-4w9f-9m3g-xg89
Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbi…
Published Aug 22, 2025 · Updated Aug 22, 2025 · Assigned by mitre