Reolink: community verdicts

2 notable / known-exploited Reolink CVEs the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Reolink CVE, see NVD ↗.

Tracked Reolink CVEs by year published2 tracked · select a year for details

Show as table

Year published	CVEs	In CISA KEV
2019	1	1
2020	0	0
2021	0	0
2022	1	1

Exploitation first, with newly exploited CVEs rising above old ones

CVE-2021-40407HIGH 7.2KEVEPSS 48%
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2019-11001HIGH 7.2KEVEPSS 38%
On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.