CVE-2021-25812

The CVE-2021-25812 entry describes a command injection vulnerability in the China Mobile An Lianbao WF-1 (version 1.01) router. The flaw is triggered via the ip parameter in a POST request to /api/ZRQos/set_online_client, enabling an attacker to inject commands and potentially execute them with t...