CVE-2021-30234

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

Code injection

The api/ZRIGMP/setMLDPROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLDPROXYWANCONNECT parameter...

CVE-2021-30234

CVE-2021-30234 affects China Mobile An Lianbao WF-1 router (version 1.0.1). The vulnerability resides in api/ZRIGMP/set_MLD_PROXY and allows remote command execution by passing shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter. Documented CVSSv3.1 severity is 9.8 (CRITICAL) with network...