CVE Watch—

CVE-2019-11001

Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVSS

—

No CVSS

EPSS

37.5%

p99

KEV

YES

Dec 18, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

37.5%EPSS · 30 days37.5%

2026-09-182026-10-15

KEV catalog record

Product

Reolink / Multiple IP Cameras

Vulnerability

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Added to KEV

Dec 18, 2024

Remediate by

Jan 8, 2025

Known ransomware use

Summary description

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

Required action

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Notes

https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001

Related CVEs

No related CVEs by CWE or product.