cve/2021/CVE-2021-33964.md
2024-05-25 21:48:12 +02:00

783 B

CVE-2021-33964

Description

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

POC

Reference

No PoCs from references.

Github