{"containers": {"cna": {"affected": [{"product": "RLC-4XX series", "vendor": "Reolink", "versions": [{"status": "affected", "version": "All versions"}]}, {"product": "RLC-5XX series", "vendor": "Reolink", "versions": [{"status": "affected", "version": "All versions"}]}, {"product": "RLN-X10 series", "vendor": "Reolink", "versions": [{"status": "affected", "version": "All versions"}]}], "datePublic": "2021-01-20T00:00:00", "descriptions": [{"lang": "en", "value": "The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-01-26T12:46:09", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02"}], "source": {"advisory": "ICSA-21-019-02", "discovery": "UNKNOWN"}, "title": "Reolink P2P Cameras", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2021-01-20T05:00:00.000Z", "ID": "CVE-2020-25169", "STATE": "PUBLIC", "TITLE": "Reolink P2P Cameras"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "RLC-4XX series", "version": {"version_data": [{"version_value": "All versions"}]}}, {"product_name": "RLC-5XX series", "version": {"version_data": [{"version_value": "All versions"}]}}, {"product_name": "RLN-X10 series", "version": {"version_data": [{"version_value": "All versions"}]}}]}, "vendor_name": "Reolink"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319"}]}]}, "references": {"reference_data": [{"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02", "refsource": "MISC", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02"}]}, "source": {"advisory": "ICSA-21-019-02", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2020-25169", "datePublished": "2021-01-20T00:00:00", "dateReserved": "2020-09-04T00:00:00", "dateUpdated": "2021-01-26T12:46:09", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rln8-410_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA97CBF4-7E5C-4DF4-99C7-244BC3CC77DC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rln8-410:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AE63907-9A5E-46D2-BCE3-41B2B1FD22F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-422_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE43C3EF-3920-49B9-BB6B-9EA03DDFB954", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-422:-:*:*:*:*:*:*:*", "matchCriteriaId": "097FC838-6BEB-4A6E-9ADA-B49F6D926561", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-510a_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C4A48F1-AD16-4499-8D9B-28086287608D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-510a:-:*:*:*:*:*:*:*", "matchCriteriaId": "03EA9726-66B7-4B33-A8F3-3421F762CF08", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-410_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "03CB154B-7116-45B8-875A-CC25991DB230", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-410:-:*:*:*:*:*:*:*", "matchCriteriaId": "8C158CF9-2697-40AF-9828-C64F3654B097", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-423s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5593386-2933-4692-89C3-F663C83344A5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-423s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9DFB155-051D-4EBD-8627-932C81A5027C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-423_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "940DC985-48CA-46E7-8AB0-713688D2CFA6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-423:-:*:*:*:*:*:*:*", "matchCriteriaId": "E37962D1-C747-4D28-897A-E41A841DE61D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:reolink:rlc-520a_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE181027-4C23-4F48-A8A6-96C23382CD99", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:reolink:rlc-520a:-:*:*:*:*:*:*:*", "matchCriteriaId": "242B396F-15EF-4A4C-AC20-AA7366E0892F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds."}, {"lang": "es", "value": "Los productos P2P de Reolink afectados no protegen suficientemente los datos transferidos entre el dispositivo local y los servidores de Reolink. Esto puede permitir a un atacante acceder a informaci\u00f3n confidencial, tales como im\u00e1genes de c\u00e1maras"}], "id": "CVE-2020-25169", "lastModified": "2021-02-01T17:35:33.063", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-01-26T18:15:43.037", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-319"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}

{}