Reolink vulnerabilities
We track 11 vulnerabilities in Reolink products across 7 products. 11 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on August 22, 2025.
Latest Reolink vulnerabilities
- 9.8 Critical severity
Smart 2k+ Plug-in Wi-fi Video Doorbell With…: Improper Neutralization of Special Elements used in a Command
Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 was discovered to contain a command injection vulnerability via the setddns_pip_system() function.
- 7.5 High severity
Smart 2k+ Plug-in Wi-fi Video Doorbell With…: Uncontrolled Resource Consumption
Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous f
- 7.3 High severity
Smart 2k+ Plug-in Wi-fi Video Doorbell With…: Improper Access Control
A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 when entering the wrong username and password allows attackers to enumerate existing accounts.
- 9.8 Critical severity
Reolink: Use of Hard-coded Cryptographic Key
Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerability to decrypt access tokens and web session tokens stored inside the app via reverse engineering.
- 7.5 High severity
Rlc-410w Firmware: Integer Overflow or Wraparound
A denial of service vulnerability exists in the netserver recv_command functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request can lead to a reboot. An attacker can send a malicious packet to trigger this vulnerability.
- 8.2 High severity
Rlc-410w Firmware: Out-of-bounds Write
A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulner
- 7.5 High severity
Rlc-410w Firmware: Files or Directories Accessible to External Parties
An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger
- 9.8 Critical severity
Rlc-410w Firmware: Out-of-bounds Write
An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted network request can lead to an out-of-bounds write. An attacker can send an HTTP request to trigger this vulnerabilit
- 7.5 High severity
Rlc-410w Firmware: Improper Verification of Cryptographic Signature
A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vu
- 7.2 High severity
Reolink RLC-410W IP Camera OS Command Injection Exploited
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the Set
- 7.2 High severity
Reolink Multiple IP Cameras OS Command Injection Exploited
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.