An Lianbao Wf-1 Firmware Security Vulnerabilities and Issues — An Lianbao Wf-1 Firmware CVE List

Lucene search

ChinamobileAn Lianbao Wf-1 Firmware

3 matches found

CVE•added 2022/01/15 10:15 a.m.•47 views

CVE-2021-33963

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

10CVSS9.7AI score0.01827EPSS

CVE•added 2022/01/18 12:15 p.m.•37 views

CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

8.8CVSS8.9AI score0.03901EPSS

CVE•added 2022/01/18 1:15 p.m.•36 views

CVE-2021-33965

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

8.8CVSS8.9AI score0.03901EPSS