3 matches found
CVE-2021-30229
The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...
8.8CVSS7.3AI score0.02884EPSS
SaveExploits1References4
Code injection
The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...
6.5CVSS9AI score0.02884EPSS
SaveExploits1References3Affected Software1
CVE-2021-30229: Improper Neutralization of Special Elements used in an OS Command
The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...
8.8CVSS6.4AI score0.02884EPSS
SaveExploits1References2
20