Back to Database
Status published
Unknown
CVE-2019-11001
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W...
Vulnerability Description
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-11001
Credits & Attribution
No credits recorded in the NVD database.
References
More from reolink
View All →CVE-2022-21801
A denial of service vulnerability exists in the netserver recv_command...
High
8.6
CVE-2022-21796
A memory corruption vulnerability exists in the netserver parse_command_list functionality...
Critical
9.3
CVE-2022-21236
An information disclosure vulnerability exists due to a web server...
High
8.1
CVE-2022-21217
An out-of-bounds write vulnerability exists in the device TestEmail functionality...
Critical
9.1
CVE-2022-21199
An information disclosure vulnerability exists due to the hardcoded TLS...
High
7.5
Affected Vendor
reolink
View all reports →Affected Software
rlc-410w firmware, c1 pro firmware, c2 pro firmware, rlc-422w firmware, rlc-511w firmware
Vulnerable Versions:
0
Timeline
Official Publish:
April 8th, 2019
Last Modified:
October 21st, 2025
Added to House:
July 20th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.