CVE-2019-11001highunder attackCWE-78

CVE-2019-11001

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.2epss 38%
from disclosure to weapon
Published on NVDApr 8
CISA KEV+2081d
Action required by CISAfederal deadline: 2025-01-08

The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

In short

An admin user on certain Reolink camera devices can inject system commands through the email test feature, allowing them to run any command with root privileges on the device.

Technical detail

Authenticated OS command injection vulnerability in the TestEmail endpoint via the addr1 parameter; allows an authenticated admin to execute arbitrary system commands with root privileges by injecting shell metacharacters. Pre-condition: valid admin credentials. Impact: complete system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a