CVE-2019-11001

Producto

Reolink / Multiple IP Cameras

Vulnerabilidad

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Añadido a KEV

18 dic 2024

Remediar antes de

8 ene 2025

Uso conocido en ransomware

No

Descripción resumida

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

Acción requerida

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Notas

https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001