← Back

CVE-2025-55622

nvd nist
Published: Aug 22, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Exploitability: 3.9 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience.

Affected (1)

Products: Reolink: Reolink
Reolink
1 product
Reolink
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Reolink
Version 4.54.0.4.20250526

Related CWEs

CWE-491
Public cloneable() Method Without Final ('Object Hijack')
A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.

References (1)

Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.