China Mobile An Lianbao WF-1 Router Command Injection (CVE-2021-30231; CVE-2021-30228; CVE-2021-30230; CVE-2021-30232; CVE-2021-30233; CVE-2021-30234)

A command injection vulnerability exists in China Mobile An Lianbao WF-1 router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-30230

The vulnerability CVE-2021-30230 affects the China Mobile An Lianbao WF-1 router (firmware v1.0.1). The issue resides in the api/ZRFirmware/set_time_zone interface, where an attacker can inject shell metacharacters via the zonename parameter to achieve remote command execution. The available docu...