Skip to content
Heist/ feed
Unrated

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited1 source record

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root. CISA required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Announced Group revision 1
Original source ↗

CVE-2019-11001

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2019-11001

Multiple IP Cameras

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2019-11001

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#1022 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement