CVE-2021-33963: Improper Neutralization of Special Elements used in a Command

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/macaddrclone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

China Mobile An Lianbao WF-1 router命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile, a Chinese company. A security vulnerability exists in the China Mobile An Lianbao WF-1 router, which originates from a command injection vulnerability in the web interface of the China Mobile An Lianbao WF-1 v1.0.1 router via a PO...