CVE-2021-33965

🗓️ 18 Jan 2022 12:01:58Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

China Mobile An Lianbao WF-1 V1.0.1 router command injection vulnerabilit

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-33965	18 Jan 202216:24	–	circl
CNNVD	China Mobile An Lianbao WF-1 router命令注入漏洞	18 Jan 202200:00	–	cnnvd
Cvelist	CVE-2021-33965	18 Jan 202212:01	–	cvelist
EUVD	EUVD-2021-20636	7 Oct 202500:30	–	euvd
NVD	CVE-2021-33965	18 Jan 202213:15	–	nvd
OSV	CVE-2021-33965	18 Jan 202213:15	–	osv
Prion	Command injection	18 Jan 202213:15	–	prion
RedhatCVE	CVE-2021-33965	22 May 202521:08	–	redhatcve

NVD

Node

chinamobile an_lianbao_wf-1_firmwareMatch1.0.1

AND

chinamobile an_lianbao_wf-1Match-

Source	Link
iot	www.iot.10086.cn/
ebuy7	www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620
github	www.github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection10.md
cnvd	www.cnvd.org.cn/flaw/show/CNVD-2021-03520

Parameter	Position	Path	Description	CWE
mesh_enable	request body	/api/ZRMesh/set_ZRMesh	Command injection via POST parameters mesh_enable and mesh_device in the /api/ZRMesh/set_ZRMesh endpoint	CWE-77
mesh_device	request body	/api/ZRMesh/set_ZRMesh	Command injection via POST parameters mesh_enable and mesh_device in the /api/ZRMesh/set_ZRMesh endpoint	CWE-77

21 Nov 2024 06:09Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 3.18.8

EPSS0.03789

cve-2021-33965 china mobile an lianbao wf-1 router command injection vulnerability nvd