CVE-2021-30230

The api/ZRFirmware/settimezone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter...

CVE-2021-30228

The CVE-2021-30228 entry documents a remote command-injection vulnerability in China Mobile An Lianbao WF-1 router (firmware version 1.0.1). The flaw stems from the api/ZRAndlink/set_ZRAndlink interface, allowing shell metacharacters in the iandlink_proc_enable parameter to execute arbitrary comm...

CVE-2021-30231

The CVE-2021-30231 issue affects China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerability is in the api/zrDm/set_ZRElink interface, where remote attackers can inject shell metacharacters into parameters such as bssaddr, abiaddr, devtoken, devid, elinksync, or elink_proc_enable to ex...

CVE-2021-30228

The api/ZRAndlink/setZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlinkprocenable parameter...

CVE-2021-30232

The api/ZRIGMP/setIGMPPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMPPROXYWANCONNECT parameter...

CVE-2021-30231

The api/zrDm/setZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elinkprocenable parameter...

CVE-2021-30230

The vulnerability CVE-2021-30230 affects the China Mobile An Lianbao WF-1 router (firmware v1.0.1). The issue resides in the api/ZRFirmware/set_time_zone interface, where an attacker can inject shell metacharacters via the zonename parameter to achieve remote command execution. The available docu...

CVE-2021-30233

The CVE-2021-30233 entry affects China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerability exists in the api/ZRIptv/setIptvInfo interface, where remote attackers can trigger command execution by supplying shell metacharacters in the iptv_vlan parameter. This is a server-side input ha...

CVE-2021-30229

CVE-2021-30229 affects the China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerable component is the api/zrDm/set_zrDm interface, where remote attackers can inject shell metacharacters into parameters dm_enable, AppKey, or Pwd to execute arbitrary commands. Public references confirm a ...

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

CVE-2021-30232

Consolidated findings for CVE-2021-30232: Affects China Mobile An Lianbao WF-1 router 1.0.1. The api/ZRIGMP/set_IGMP_PROXY interface is vulnerable to OS command injection via shell metacharacters in the IGMP_PROXY_WAN_CONNECT parameter, enabling remote command execution. The issue is rooted in th...

CVE-2021-25812

The CVE-2021-25812 entry describes a command injection vulnerability in the China Mobile An Lianbao WF-1 (version 1.01) router. The flaw is triggered via the ip parameter in a POST request to /api/ZRQos/set_online_client, enabling an attacker to inject commands and potentially execute them with t...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. An operating system command injection vulnerability exists in version 1.0.1 of the China Mobile An Lianbao WF-1 router, which stems from api/ZRIGMP/setMLDPROXY and allows remote attackers to execute arbitrary commands via...

China Mobile An Lianbao WF-1 命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. A security vulnerability exists in China Mobile An Lianbao WF-1 1.01, which originates from a POST request to api ZRQos to set up an online client via the "ip" parameter...

CVE-2021-30231: Improper Neutralization of Special Elements used in an OS Command

The api/zrDm/setZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elinkprocenable parameter...

CVE-2021-30232: Improper Neutralization of Special Elements used in an OS Command

The api/ZRIGMP/setIGMPPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMPPROXYWANCONNECT parameter...

CVE-2021-30234: Improper Neutralization of Special Elements used in an OS Command

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

CVE-2021-30228: Improper Neutralization of Special Elements used in an OS Command

The api/ZRAndlink/setZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlinkprocenable parameter...

CVE-2021-30233: Improper Neutralization of Special Elements used in an OS Command

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

CVE-2021-25812: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/setonlineclient...