CVE-2019-11001

reolink rlc-410w firmware, reolink c1 pro firmware, reolink c2 pro firmware

Published 8 Apr 2019 · updated 17 Jun 2026 · Analyzed

7.2 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 18 Dec 2024, with a remediation deadline of 8 Jan 2025 for US federal agencies.

Required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

Description

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.

References

github.com/mcw0/PoC/blob/master/Reolink-IPC-RCE.py · Exploit, Third Party Advisory
www.vdoo.com/blog/working-with-the-community-%E2%80%93-significant-vulnerabilities-in-reolink-cameras/ · Broken Link, Exploit, Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11001 · US Government Resource