Reolink · Multiple IP Cameras

CVE-2019-11001

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Exploited in attacks High 7.2 Attack chance: 38%

What it is

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.

CISA: Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

What to do

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Deadline for US federal agencies: January 8, 2025

Added to the CISA list: December 18, 2024
Published: April 8, 2019
Severity: High 7.2 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 38% in the top 1.5% of all known vulnerabilities
Weakness: CWE-78
More details: NVD · CVE.org · CISA

All references (2)

More exploited flaws from Reolink

Added	Vulnerability	Product	Severity	Attack chance
Dec 18, 2024	OS Command Injection Vulnerability CVE-2021-40407	RLC-410W IP Camera	Critical 9.1	48%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.