VULNERABILITY INTELLIGENCE

CVE-2019-11001

CVSS score7.2 HIGH

EPSS probability37.54%

CISA KEVKnown exploited vulnerability

Published2019-04-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Vendor / product: Reolink / Multiple IP Cameras

Description

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.

Weakness classification

nvd@nist.gov: CWE-78
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-78

Primary references

cve@mitre.org — Exploit, Third Party Advisory
cve@mitre.org — Broken Link, Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource