Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-01-18	CVE-2021-33965	Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1 China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. network low complexity chinamobile CWE-77	6.5
2022-01-18	CVE-2021-33964	Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1 China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. network low complexity chinamobile CWE-77	6.5
2021-04-29	CVE-2021-30229	OS Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1 The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter. network low complexity chinamobile CWE-78	6.5