CVE-2021-25812

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/setonlineclient...

CVE-2021-25812

The CVE-2021-25812 entry describes a command injection vulnerability in the China Mobile An Lianbao WF-1 (version 1.01) router. The flaw is triggered via the ip parameter in a POST request to /api/ZRQos/set_online_client, enabling an attacker to inject commands and potentially execute them with t...