CVE:CVE-2019-11001
CNNVD:CNNVD-201904-330
Reolink Digital Technology RLC-410W等都是中国香港Reolink Digital Technology公司的一款IP摄像头。
多款Reolink产品中存在安全漏洞。攻击者借助‘TestEmail’功能利用该漏洞注入并以root权限执行操作系统命令。以下产品及版本受到影响：Reolink RLC-410W 1.0.227及之前版本；C1 Pro 1.0.227及之前版本；C2 Pro 1.0.227及之前版本；RLC-422W 1.0.227及之前版本；RLC-511W 1.0.227及之前版本。
solution:Upgrade reolink rlc-410w_firmware to a higher version than 1.0.227,and avoid the version (,1.0.227]; Upgrade reolink c1_pro_firmware to a higher version than 1.0.227,and avoid the version (,1.0.227]; Upgrade reolink c2_pro_firmware to a higher version than 1.0.227,and avoid the version (,1.0.227]; Upgrade reolink rlc-422w_firmware to a higher version than 1.0.227,and avoid the version (,1.0.227]; Upgrade reolink rlc-511w_firmware to a higher version than 1.0.227,and avoid the version (,1.0.227]