Reported security flow in Reolink cameras, what is the status

coldevening

Hello,
As it was reported yesterday by Tom's Guide (read the article here https://www.tomsguide.com/us/smart-home-security-despair-rsa2019,news-29601.html ), there is a Telnet vulnerability in Reolink cameras which allows full control of the camera including installation of cryptocurrency-mining malware.

"Alex "Jay" Balan of Bitdefender showed RSA attendees that four different cheap Chinese security cameras sold under the Geenker, Keekoon, Reolink and Tenvis names had terrible security. Most could be accessed over the internet via Telnet, the 1970s network protocol with no encryption. Anyone with mid-level coding skills could dial into the cameras from anywhere and watch you at home. (UPDATE: Reolink reached out to us to say it had patched the flaws with a firmware update.)"

The article mentions that Reolink has patched the flaws with an update. What is the current situation with the installed firmware? For example, I have multiple RLC-420 and RLC-422-5MP cameras. What version of firmware should I have to make sure the security vulnerability is addressed? Thank you.

carbonita

@coldevening thanks for the alert. More details on the busyBox vulnerability: https://www.pcmag.com/news/366949/internet-of-things-devices-have-a-serious-security-problem

Crimp On

I have not done a firmware update recently, and I just now confirmed that my Reolink RLC410-WS and Argus cameras do not respond to telnet. "Connection refused." No chance to log in or anything. Do not have a C1 camera, so have no idea if there was a vulnerability in that model.

coldevening

Thank you very much, all

davidptaylor74

Hi I just bought an Argus pro , do i need to update the firmware ? , my firmware is 0530_94_107_24 not sure wich one i need to download from here ?

https://support.reolink.com/hc/en-us/articles/360021715373-03-21-2019-Firmware-for-Reolink-IP-Cameras-IPC-3816M-

Carl

Glad to help you solve this problem. The firmware upgrade for the battery-powered camera is different from other cameras. If you've enabled the auto upgrade in upgrade setting page, you don't need to upgrade the firmware manually anymore. Please refer to Enable Auto Upgrade for Battery-powered Cameras.

davidptaylor74

Hi Carl thank you for getting back to me so quick , I love the auto update feature its really easy to use , just checked and enabled it
thank you !

jonasdavid611

To monitor the activities of employees at the office or the child at home or any intruders entering the house, security cameras always played a vital role. I will personally recommend to use Arlo camera as I have personally used this one, it is by far the best security cameras I have ever used. It is basically HD Smart security camera which comes with great inbuilt features like it is weatherproof, it has night vision, motion detection features also it is completely wireless.Thereby after installing the camera just download arlo app for pc and it is all ready to operate.