Threat database

A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the possibility of brute-force cracking the credentials. This issue could allow attackers on the same local network to intercept traffic between the Hub and associated cameras and compromise the credentials of connected cameras.

Multiple Reolink IP camera models have an authenticated OS command injection vulnerability that allows an admin user to execute arbitrary commands as root via the 'TestEmail' feature. This vulnerability affects models including RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W. Exploitation requires authentication but can lead to full system compromise. The vulnerability is known to be exploited in the wild.

The Reolink RLC-410W IP camera has an authenticated OS command injection vulnerability in its network settings functionality. This vulnerability allows an attacker with valid credentials to execute arbitrary operating system commands on the device. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.