Medium severity5.3NVD Advisory· Published Aug 22, 2025· Updated Apr 15, 2026

CVE-2025-55627

Description

Insufficient privilege verification in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows authenticated attackers to create accounts with elevated privileges.

Affected products

Reolink/Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chimellm-fuzzy
Range: = firmware v3.0.0.4662_2503122283

Patches

Vulnerability mechanics

References

relieved-knuckle-264.notion.site/Account-Takeover-Create-Account-23c43700364280c2b0bddba94a9362ednvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000