Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ChinamobileAn Lianbao Wf-1 Firmware

11 matches found

CVE
CVE•added 2022/01/15 10:15 a.m.•47 views

CVE-2021-33963

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

10CVSS9.7AI score0.01827EPSS
CVE
CVE•added 2022/01/18 12:15 p.m.•37 views

CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

8.8CVSS8.9AI score0.03901EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•36 views

CVE-2021-30228

The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink_proc_enable parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2022/01/18 1:15 p.m.•36 views

CVE-2021-33965

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

8.8CVSS8.9AI score0.03901EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•33 views

CVE-2021-30234

The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•31 views

CVE-2021-30232

The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMP_PROXY_WAN_CONNECT parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•30 views

CVE-2021-30231

The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elink_proc_enable parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•29 views

CVE-2021-30230

The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•27 views

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter.

9.8CVSS9.8AI score0.03192EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•26 views

CVE-2021-25812

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.

9.8CVSS9.4AI score0.04061EPSS
CVE
CVE•added 2021/04/29 4:15 p.m.•24 views

CVE-2021-30229

The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter.

8.8CVSS9AI score0.03117EPSS