Reolink: >> Smart 2k+ Plug-In Wi-Fi Video Doorbell With Chime Firmware >> 3.0.0.4662_2503122283 Security Vulnerabilities
Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous ffmpeg-based stream pushes.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-08-22
Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerability via the setddns_pip_system() function.
CVSS Score
9.8
EPSS Score
0.042
Published
2025-08-22
A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 when entering the wrong username and password allows attackers to enumerate existing accounts.
CVSS Score
7.3
EPSS Score
0.001
Published
2025-08-22