CVE-2025-56802
The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
Vendor
Product
CWE
Yayın Tarihi
2025-10-21 19:21:23
Güncelleme
2025-11-17 16:04:32
Source Identifier
cve@mitre.org
KEV Date Added
-