{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Reolink Multiple IP Cameras OS Command Injection · updates",
  "home_page_url": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001",
  "feed_url": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001/feed.json",
  "description": "Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the \"TestEmail\" functionality to inject and run OS commands as root. Added to the CISA KEV catalog on 2024-12-18. CVE-2019-11001 was assigned before 2024; the KEV listing came in 2024.",
  "language": "en",
  "_pwn": {
    "slug": "reolink-multiple-ip-cameras-cve-2019-11001",
    "severity": "high",
    "status": "closed",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001/feed.xml",
    "llms": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001/llms.txt",
    "json": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001#2024-12-18-a52e799b",
      "url": "https://pwn.watch/i/reolink-multiple-ip-cameras-cve-2019-11001#2024-12-18-a52e799b",
      "title": "Reolink Multiple IP Cameras OS Command Injection: CISA added CVE-2019-11001 to the KEV catalog (federal deadline 2025-01-08)",
      "content_text": "Reolink Multiple IP Cameras OS Command Injection: CISA added CVE-2019-11001 to the KEV catalog (federal deadline 2025-01-08)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-12-18T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "high"
      ]
    }
  ]
}