The vulnerability of the TestEmail command in the Reolink RLC-410W, C1 Pro, Reolink C2 Pro, RLC-422W, and RLC-511W software-based cameras allows a intruder to execute arbitrary commands.

The vulnerability of the TestEmail command in the Reolink RLC-410W, C1 Pro, Reolink C2 Pro, RLC-422W, and RLC-511W software-based cameras is related to the failure to take measures to neutralize special elements during the processing of the addr1 field. Exploiting this vulnerability can allow a...

CVE-2019-11001

CVE-2019-11001 affects Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W through version 1.0.227. An authenticated admin can use the TestEmail functionality to inject and execute OS commands as root (shell metacharacters in addr1). This is documented in multiple feeds (NVD and Red Hat) and...

CVE-2019-11001: Improper Neutralization of Special Elements used in an OS Command

On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field...