The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter.
CPE | Name | Operator | Version |
---|---|---|---|
an_lianbao_wf-1_firmware | eq | 1.0.1 |