CVE-2019-11001

HighCVSS 7.2/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/mcw0/PoC/blob/master/Reolink-IPC-RCE.pyExploit, Third Party Advisory
https://www.vdoo.com/blog/working-with-the-community-%E2%80%93-significant-vulnerabilities-in-reolink-cameras/Broken Link, Exploit, Third Party Advisory
https://github.com/mcw0/PoC/blob/master/Reolink-IPC-RCE.pyExploit, Third Party Advisory
https://www.vdoo.com/blog/working-with-the-community-%E2%80%93-significant-vulnerabilities-in-reolink-cameras/Broken Link, Exploit, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11001US Government Resource

Timeline

Published: Apr 8, 2019
Last modified: Jun 17, 2026
Added to CISA KEV: Dec 18, 2024
NVD status: Analyzed

Related CVEs from 2019

CVE-2019-110026.1In Materialize through 1.0.0, XSS is possible via the Tooltip feature.CVE-2019-110036.1In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.CVE-2019-110046.1In Materialize through 1.0.0, XSS is possible via the Toast feature.CVE-2019-110059.8In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which al CVE-2019-110069.1In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which all CVE-2019-110078.1In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allow CVE-2019-110088.8In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allow CVE-2019-110098.1In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allow CVE-2019-11016.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-110106.5In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to c CVE-2019-110119.8Akamai CloudTest before 58.30 allows remote code execution.CVE-2019-110136.5Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to trav