---
id: "CVE-2019-11001"
kind: "vulnerability"
aliases: ["CVE-2019-11001"]
title: "On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use\u2026"
severity: "critical"
cvss: 9.0
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Reolink Multiple IP Cameras", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "reolink rlc-410w firmware", "fixed": [], "affected": "<= 1.0.227", "ecosystem": "vendor"}, {"name": "reolink c1 pro firmware", "fixed": [], "affected": "<= 1.0.227", "ecosystem": "vendor"}, {"name": "reolink c2 pro firmware", "fixed": [], "affected": "<= 1.0.227", "ecosystem": "vendor"}, {"name": "reolink rlc-422w firmware", "fixed": [], "affected": "<= 1.0.227", "ecosystem": "vendor"}, {"name": "reolink rlc-511w firmware", "fixed": [], "affected": "<= 1.0.227", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "iot", "ip-cameras", "reolink"]
not_affected_if: ["cameras-not-internet-exposed", "other-reolink-models"]
published_at: "2019-04-08T17:29:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11001", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11001", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use…

Several Reolink IP camera models contain an OS command injection flaw in the TestEmail function. An authenticated admin can run arbitrary OS commands as root on the camera.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Reolink Multiple IP Cameras affected ? fixed ?
- vendor:reolink rlc-410w firmware affected <= 1.0.227 fixed ?
- vendor:reolink c1 pro firmware affected <= 1.0.227 fixed ?
- vendor:reolink c2 pro firmware affected <= 1.0.227 fixed ?
- vendor:reolink rlc-422w firmware affected <= 1.0.227 fixed ?
- vendor:reolink rlc-511w firmware affected <= 1.0.227 fixed ?

## How to check

Identify Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, or RLC-511W cameras on the network and check their firmware version against the vendor's advisory; exact version details are unknown from the sources.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11001
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-11001

## From the sources

Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.

CISA required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_