cvelist/2020/25xxx/CVE-2020-25169.json

{
    "CVE_data_meta": {
        "ASSIGNER": "ics-cert@hq.dhs.gov",
        "DATE_PUBLIC": "2021-01-20T05:00:00.000Z",
        "ID": "CVE-2020-25169",
        "STATE": "PUBLIC",
        "TITLE": "Reolink P2P Cameras"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "RLC-4XX series",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "All versions"
                                        }
                                    ]
                                }
                            },
                            {
                                "product_name": "RLC-5XX series",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "All versions"
                                        }
                                    ]
                                }
                            },
                            {
                                "product_name": "RLN-X10 series",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "All versions"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "Reolink"
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds."
            }
        ]
    },
    "generator": {
        "engine": "Vulnogram 0.0.9"
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02",
                "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-019-02"
            }
        ]
    },
    "source": {
        "advisory": "ICSA-21-019-02",
        "discovery": "UNKNOWN"
    }
}