Approved changes feed: RSS · Atom

cpe:2.3:o:reolink:duo_2_wifi_camera_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorReolink (b49896ec-72c3-57ee-8581-bf98824c2ad2)
ProductDuo 2 Wifi Camera Firmware (6e8711b8-82c1-5419-aa88-d1342d1d847f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48644 vulnerable 2026-06-03 14:57:10.007244 Details available
Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23031701) allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such as brute-forcing of passwords. The vulnerability arises from the application responding differently to login attempts with valid and invalid usernames.
Published: 2024-10-22T00:00:00.000Z
Updated: 2024-10-23T18:23:13.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.