{"id":"CVE-2020-25169","aliases":["EUVD-2020-17860","GHSA-69qh-6j8v-ppx3"],"status":"published","title":"Reolink P2P Cameras","description":"The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01006,"percentile":0.63303,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2021-01-26T12:46:09Z","modified":"2026-06-17T03:06:30Z","products":[{"vendor":"reolink","product":"rlc-410_firmware"},{"vendor":"reolink","product":"rlc-422_firmware"},{"vendor":"reolink","product":"rlc-423_firmware"},{"vendor":"reolink","product":"rlc-423s_firmware"},{"vendor":"reolink","product":"rlc-4xx series"},{"vendor":"reolink","product":"rlc-510a_firmware"},{"vendor":"reolink","product":"rlc-520a_firmware"},{"vendor":"reolink","product":"rlc-5xx series"},{"vendor":"reolink","product":"rln-x10 series"},{"vendor":"reolink","product":"rln8-410_firmware"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25169"},{"url":"https://github.com/advisories/GHSA-69qh-6j8v-ppx3"}],"sources":{"cve":[{"id":"CVE-2020-25169","title":"Reolink P2P Cameras","description":"The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.","status":"published","published":"2021-01-26T12:46:09.208Z","modified":"2024-09-16T22:15:58.929Z","cwes":["CWE-319"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-17860","description":"The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.","status":"published","published":"2021-01-26T12:46:09Z","modified":"2024-09-16T22:15:58Z","updated_at":"2026-11-03T00:55:04.418269Z"}],"ghsa":[{"id":"GHSA-69qh-6j8v-ppx3","title":"The affected Reolink P2P products do not sufficiently protect data transferred between the local...","description":"The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.","status":"published","published":"2022-05-24T17:40:08Z","modified":"2023-01-29T05:05:30Z","cwes":["CWE-319"],"updated_at":"2026-11-02T14:45:48.396935Z"}],"nvd":[{"id":"CVE-2020-25169","description":"The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds.","status":"published","published":"2021-01-26T18:15:43.037Z","modified":"2026-06-17T03:06:30.19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:06:30.596418Z"}]}}