RCE in Reolink C1_pro
CVE-2019-11001
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 f…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.384 (98.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Broken Link)
- cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (US Government Resource)
Frequently asked questions
- What is CVE-2019-11001?
- CVE-2019-11001 is a high-severity vulnerability in Reolink C1_pro, classified under OS Command Injection. CVSS score: 7.2/10. Published 2019-04-08.
- How severe is CVE-2019-11001?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2019-11001 known to be exploited?
- Yes. CVE-2019-11001 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2024-12-18), indicating it is being actively exploited. 3 public proof-of-concept repositories are indexed.