coldbraid

CVE-2019-11001 Reolink Multiple IP Cameras

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

CVSS
not scored

CWE-78

On CISA’s exploited list

Reolink Multiple IP Cameras OS Command Injection Vulnerability

Added
2024-12-18
Federal patch deadline
2025-01-08
Ransomware use
not known