PT-2025-42926 · Reolink · Reolink Desktop Application

Publicado 2025-10-21 · Atualizado 2025-11-17 · CVE-2025-56801

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Reolink Desktop Application version 8.18.12

Description The Reolink Desktop Application version 8.18.12 contains hardcoded credentials used as the Initialization Vector (IV) in its AES-CFB encryption implementation. This allows attackers with access to the application environment to decrypt encrypted configuration data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-321

Identificadores relacionados

CVE-2025-56801

Produtos afetados

Reolink Desktop Application

Referências · 7

• 🔥 https://shinycolumn.notion.site/reolink-aes-iv · Exploit
• 🔥 https://github.com/shinyColumn/CVE-2025-56801 · Exploit
• https://twitter.com/CVEnew/status/1980708196491608334 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-56801 · Nota de Segurança
• https://t.me/cveNotify/143065 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-56801 · Aviso do Fabricante
• https://twitter.com/BugBountyShorts/status/1980721519652131197 · Publicação no Twitter