CVE-2025-60858

Reolink Video Doorbell Wi-Fi DB_566128M5MP_W stores and transmits DDNS credentials in plaintext within its configuration and update scripts, allowing attackers…

High · published October 28, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

🚨 The Reolink Video Doorbell is spilling secrets! It stores DDNS credentials in plaintext, making it alarmingly easy for attackers to intercept sensitive information. ⚡ Think of it like a hotel that keeps its guests' room keys in an unlocked drawer at the front desk—anyone can walk in and grab them without breaking a sweat! This vulnerability could let attackers access your DDNS credentials, potentially giving them control over your network and the ability to spy on you through your own doorbell camera. Imagine someone peeking into your home, all because your security system forgot to lock the front door!

Put simply

Think of it like a hotel that keeps its guests' room keys in an unlocked drawer at the front desk—anyone can walk in and grab them without breaking a sweat! The Reolink Video Doorbell stores DDNS credentials in plaintext in its configuration and update scripts, meaning that anyone who can access these scripts can easily extract the sensitive information without any authentication barriers.

What to do

This vulnerability could let attackers access your DDNS credentials, potentially giving them control over your network and the ability to spy on you through your own doorbell camera. Imagine someone peeking into your home, all because your security system forgot to lock the front door! To secure your device, patch to the latest firmware version as soon as it's available, and consider changing your DDNS credentials to something more secure. Regularly review your device's settings to ensure no sensitive information is exposed. 🛡️ You’ve got this! By following these steps, you’re taking strong action to protect your privacy. Let's keep those doorbell hackers at bay! 🔐

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Published
2025-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    Reolink Video Doorbell Wi-Fi DB_566128M5MP_W stores and transmits DDNS credentials in plaintext within its configuration and update scripts, allowing attackers…
    cvelistv5