CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous ffmpeg-based stream pushes.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.52% chance of exploitation in the next 30 days, 42th percentile

Published

2025-08-22

Proof-of-concept exploits (1)

• https://relieved-knuckle-264.notion.site/RTMP-Injection-DoS-through-Unauthenticated-Strea…

References

• CVE Record
• NVD entry

Related

• CVE-2025-55630
• CVE-2025-5566
• CVE-2025-55625
• CVE-2025-55668
• CVE-2025-55624
• CVE-2025-5569