I
ncorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous ffmpeg-based stream pushes.
References
| Link | Resource |
|---|---|
| https://cwe.mitre.org/data/definitions/306.html | Technical Description |
| https://cwe.mitre.org/data/definitions/400.html | Technical Description |
| https://relieved-knuckle-264.notion.site/RTMP-Injection-DoS-through-Unauthenticated-Stream-Publish-23c437003642800297c8c128b6117885?pvs=74 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Oct 2025, 13:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:reolink:smart_2k\+_plug-in_wi-fi_video_doorbell_with_chime:-:*:*:*:*:*:*:* cpe:2.3:o:reolink:smart_2k\+_plug-in_wi-fi_video_doorbell_with_chime_firmware:3.0.0.4662_2503122283:*:*:*:*:*:*:* |
|
| References | () https://cwe.mitre.org/data/definitions/306.html - Technical Description | |
| References | () https://cwe.mitre.org/data/definitions/400.html - Technical Description | |
| References | () https://relieved-knuckle-264.notion.site/RTMP-Injection-DoS-through-Unauthenticated-Stream-Publish-23c437003642800297c8c128b6117885?pvs=74 - Exploit, Third Party Advisory | |
| First Time |
Reolink
Reolink smart 2k\+ Plug-in Wi-fi Video Doorbell With Chime Firmware Reolink smart 2k\+ Plug-in Wi-fi Video Doorbell With Chime |
22 Aug 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-22 17:15
Updated : 2025-10-21 13:57
NVD link : CVE-2025-55634
Mitre link : CVE-2025-55634
CVE.ORG link : CVE-2025-55634
JSON object : View
Products Affected
CWE
CWE-400
Uncontrolled Resource Consumption