{"id":"CVE-2019-11001","kind":"vulnerability","aliases":["CVE-2019-11001"],"related":[],"title":"On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use…","description":"Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the \"TestEmail\" functionality to inject and run OS commands as root.\n\nCISA required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","summary":"Several Reolink IP camera models contain an OS command injection flaw in the TestEmail function. An authenticated admin can run arbitrary OS commands as root on the camera.","severity":"critical","cvss":9.0,"epss":null,"exploited":true,"exploited_at":"2024-12-18T00:00:00+00:00","products":[{"name":"Reolink Multiple IP Cameras","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"reolink rlc-410w firmware","fixed":[],"affected":"<= 1.0.227","ecosystem":"vendor"},{"name":"reolink c1 pro firmware","fixed":[],"affected":"<= 1.0.227","ecosystem":"vendor"},{"name":"reolink c2 pro firmware","fixed":[],"affected":"<= 1.0.227","ecosystem":"vendor"},{"name":"reolink rlc-422w firmware","fixed":[],"affected":"<= 1.0.227","ecosystem":"vendor"},{"name":"reolink rlc-511w firmware","fixed":[],"affected":"<= 1.0.227","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","iot","ip-cameras","reolink"],"not_affected_if":["cameras-not-internet-exposed","other-reolink-models"],"how_to_check":"Identify Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, or RLC-511W cameras on the network and check their firmware version against the vendor's advisory; exact version details are unknown from the sources.","fix":null,"status":"open","published_at":"2019-04-08T17:29:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:56:00+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T20:56:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown; the CISA entry says the product may be end-of-life or end-of-service, so discontinue use if no mitigation is available.","reach":"network","impact":"high","summary":"Several Reolink IP camera models contain an OS command injection flaw in the TestEmail function. An authenticated admin can run arbitrary OS commands as root on the camera.","category":"infrastructure","who_cares":["reolink","ip-cameras","iot"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker with admin login runs commands as root on the camera.","analyst_note":"Find the Reolink advisory or firmware fix for the listed models and confirm whether any patched firmware exists, via the CISA KEV entry for CVE-2019-11001.","how_to_check":"Identify Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, or RLC-511W cameras on the network and check their firmware version against the vendor's advisory; exact version details are unknown from the sources.","needs_analyst":true,"not_affected_if":["other-reolink-models","cameras-not-internet-exposed"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000502,"input_tokens":2898,"output_tokens":424,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-11001':27A,30A '-2019':26A,29A '1.0.227':19A '410w':5A,38A,96C '422w':12A,51A,103C '511w':16A,56A,107C 'action':138C 'admin':22A,82B,122C 'allow':119C 'and/or':149C 'arbitrari':85B 'authent':21A,81B,112C,121C 'c1':6A,41A,97C 'c2':8A,45A,99C 'camera':63B,68B,92B,109C 'cameras':34A 'cisa':136C 'command':73B,87B,114C,133C 'contain':70B,110C 'could':142C 'current':162C 'cve':25A,28A 'devic':17A 'discontinu':157C 'end':145C,151C 'end-of-lif':144C 'end-of-servic':150C 'eo':154C 'eol':148C 'exploit':58B 'firmware':39A,43A,47A,52A,57A 'flaw':75B 'function':79B,127C 'impact':140C 'infrastructur':59B 'inject':74B,115C,129C 'iot':60B 'ip':33A,62B,67B,108C 'ip-camera':61B 'life':147C 'mitig':163C 'model':69B 'multiple':32A 'os':72B,86B,113C,132C 'pro':7A,9A,42A,46A,98C,100C 'product':141C,158C 'reolink':2A,31A,35A,40A,44A,48A,53A,64B,66B,93C 'requir':137C 'rlc':4A,11A,15A,37A,50A,55A,95C,102C,106C 'rlc-410w':3A,36A,94C 'rlc-422w':10A,49A,101C 'rlc-511w':14A,54A,105C 'root':89B,135C 'run':84B,131C 'servic':153C 'sever':65B 'testemail':78B,126C 'unavail':165C 'use':24A,124C 'user':155C 'util':159C 'vulner':116C,118C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2019-04-08T17:29:00+00:00","kev":{"dateAdded":"2024-12-18","dueDate":"2025-01-08","requiredAction":"The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2019-11001","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11001","severity":null,"published_at":"2024-12-18T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T16:39:46+00:00","note":null},{"source":"nvd","external_id":"CVE-2019-11001","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11001","severity":null,"published_at":"2019-04-08T17:29:00+00:00","modified_at":"2026-06-17T02:12:05+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}