CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/setfirewalllevel which receives parameters by POST request, and the parameter firewalllevel has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/setfirewalllevel which receives parameters by POST request, and the parameter firewalllevel has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

PT-2022-10305

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue concerns a command injection vulnerability in the web interface of the China Mobile An Lianbao WF-1 router. Specifically, the API endpoint "/api/ZRRuleFilter/set firewall...