Medium severity6.5NVD Advisory· Published Aug 22, 2025· Updated Apr 15, 2026

CVE-2025-55629

Description

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value.

Affected products

Reolink/Smart 2K+llm-create
Range: = firmware v3.0.0.4662_2503122283

Patches

Vulnerability mechanics

References

relieved-knuckle-264.notion.site/Account-Takeover-Change-password-23c437003642806bb821fec983aedb9fnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000