PT-2025-42530 · Reolink · Reolink Video Doorbell Wifi Db 566128M5Mp W

Published 2025-10-16 · Updated 2025-10-16 · CVE-2025-60855

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Reolink Video Doorbell WiFi DB 566128M5MP W (affected versions not specified)

Description The Reolink Video Doorbell WiFi DB 566128M5MP W does not properly validate firmware update signatures. This allows attackers to upload malicious firmware images, potentially leading to arbitrary code execution with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-60855

Affected Products

Reolink Video Doorbell Wifi Db 566128M5Mp W

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-60855 · Security Note
• https://cybermaya.in/posts/Post-45 · Note
• https://twitter.com/CVEnew/status/1978932567446557130 · Twitter Post
• https://reolink.com/download-center · Note
• https://t.me/CVEtracker/35143 · Telegram Post