This vulnerability in Reolink Home Hub's netclient and factory services allows brute-force attacks on credentials due to weak authentication mechanisms. Attackers on the same local network can exploit this to intercept communications between the Hub and its cameras, potentially gaining unauthorized access to camera credentials. The issue affects versions prior to v3.3.0.456_26031911. No official patch or remediation level has been published yet.

An attacker on the same local network can perform brute-force attacks to compromise credentials used by the Hub and connected cameras. This could lead to interception of sensitive traffic and unauthorized access to camera credentials, potentially undermining the security and privacy of the surveillance system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local network access to trusted users only and monitor for unusual authentication attempts. Avoid exposing the Hub to untrusted networks.