CVE-2022-21199CWE-321

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102

High · published January 28, 2022

CVSS v3.0
7.5
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted man-in-the-middle attack can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00890 · 59.0th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2022-01-28T19:10Z
EPSS history
Timeline
  • 28 JAN 19:10Z
    An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102
    cvelistv5