CVE-2025-56801
MEDIUM 1 PoC
MEDIUM
Priority: 0.01
BB Relevance:
55/100
Published: 2025-10-21
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
Low
I:
None
A:
Low
Description
The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
Weakness Classification (1)
References & Advisories (2)
Exploit
Third Party Advisory
Exploit
Third Party Advisory