CVE-2019-11001

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Reolink — Multiple IP Cameras

Added to KEV catalog: 18 December 2024
Federal remediation due date: 8 January 2025
Weakness classification (CWE): CWE-78

CISA Description

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

Required action

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Notes

https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001

View on NVD View on MITRE CVE View full CISA catalog

More Reolink Vulnerabilities

CVE-2021-40407

Reolink RLC-410W IP Camera OS Command Injection Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services