| Reolink Video Doorbell PoE (DB-BP01)
|
|
Security Grade
Calculator v1
|
Reolink Video Doorbell PoE (DB-BP01)
Release Date: 2023-09-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Very common
|
🔗 Proof
|
CVE-2025-60856: an unsecured UART / serial console gives root shell access to anyone with physical access.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
CVE-2025-60855: insufficient validation of firmware update signatures allows malicious images to run as root. CVE-2025-60858: DDNS credentials stored and transmitted in plaintext (CVSS 7.5).
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Not listed in CISA KEV; technical details are public but exploitation probability remains low.
|
| Updatability
|
Very common
|
🔗 Proof
|
Vendor ships firmware updates regularly, although signature validation itself was found insufficient.
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
DDNS credentials are handled in plaintext within configuration and update scripts.
|
| Communications
|
Encrypted with obselete encryption
|
🔗 Proof
|
Plaintext transmission of DDNS credentials allows interception or extraction of sensitive information.
|
| Storage
|
Encrypted with obselete encryption
|
🔗 Proof
|
Credentials are stored in plaintext in configuration files.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
CVE-2025-55627: insufficient privilege verification lets authenticated users create accounts with elevated privileges.
|
| Authentication
|
Basic
|
🔗 Proof
|
CVE-2025-55626: an IDOR allows unauthorized access to admin-only settings and session storage.
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
CVE-2025-55629: insecure permissions allow arbitrary changes to other users' passwords.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Basic recording and access records exist; no complete security audit log documented.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
A password is set during initial setup; no enforced complexity policy documented.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Linux (Companion App: Reolink App)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage: microSD up to 256 GB
|
| Power, Battery & Charging
|
Battery: • Power: Power over Ethernet (IEEE 802.3af) or 12-24 V DC • Charging:
|
| Display & Camera
|
Display: • Camera: 2K 5MP, 180 degree head-to-toe view
|
| Sound & Connectivity
|
Sound: Two-way audio, microphone and speaker • Connectivity: Ethernet (PoE), Wi-Fi 802.11 b/g/n on WiFi variant
|
| Physical (Dimensions & Mass)
|
Dimensions: 133 x 48 x 28 mm • Mass: approx. 200 g
|
Overall assessment: This model is covered by concrete, model-specific CVEs. CVE-2025-60855 weakens firmware signature validation so malicious images can run as root, CVE-2025-60856 exposes an unauthenticated UART root shell to anyone with physical access, and CVE-2025-60858 leaves DDNS credentials in plaintext both at rest and in transit. Additional authorization flaws (CVE-2025-55626/55627/55629) allow privilege escalation and password changes across accounts. Firmware updates are shipped frequently, which is the main mitigation, and the device is not listed in CISA KEV.
