Vulnerabilities > Chinamobile > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-01-18 CVE-2021-33965 Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1
China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability.
network
low complexity
chinamobile CWE-77
6.5
2022-01-18 CVE-2021-33964 Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1
China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability.
network
low complexity
chinamobile CWE-77
6.5
2021-04-29 CVE-2021-30229 OS Command Injection vulnerability in Chinamobile AN Lianbao Wf-1 Firmware 1.0.1
The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter.
network
low complexity
chinamobile CWE-78
6.5
2019-01-02 CVE-2018-20326 Cross-site Scripting vulnerability in Chinamobile Gpn2.4P21-C-Cn Firmware W2001En00
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.
4.3