Reolink Smart 2K+ Wi-Fi Video Doorbell Session Management Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime, specifically in firmware version 3.0.0.4662_2503122283. The issue arises because the device manages user sessions system-wide, rather than on an individual account basis. This flaw could be exploited to exhaust system resources, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability can lead to resource exhaustion, causing a denial-of-service condition on the affected device.