CVE-2021-30229

The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...

PT-2021-18676

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into specific parameters in the "api/zrDm/set zrDm" interface. Th...