CVE Watch—

CVE-2019-11001

Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

37.5%

p99

KEV

SIM

18 de dez. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

37.5%EPSS · 30 dias37.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Reolink / Multiple IP Cameras

Vulnerabilidade

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Adicionado ao KEV

18 de dez. de 2024

Corrigir até

8 de jan. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

Ação necessária

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Notas

https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.