Reolink Smart 2K+ Wi-Fi Video Doorbell Insecure Password Change Vulnerability
Vulnerability
A vulnerability exists in the Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime, specifically in firmware version 3.0.0.4662_2503122283. The issue arises from insecure permissions that allow attackers to arbitrarily change the passwords of other users by manipulating the userName value.
Impact
Exploitation of this vulnerability could lead to unauthorized password changes, allowing attackers to gain access to other users' accounts.
Added: Aug 22, 2025, 5:35 PM
Updated: Aug 22, 2025, 6:38 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.