CVE-2019-11001

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001

Remediation deadline: January 8, 2025

Description

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

Timeline

Published:December 18th, 2024 12:00 AM

Last modified:December 18th, 2024 12:00 AM

Added to KEV:December 18th, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Reolink

Products

Multiple IP Cameras

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute