cve/2021/CVE-2021-33963.md
2024-05-25 21:48:12 +02:00

761 B

CVE-2021-33963

Description

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

POC

Reference

No PoCs from references.

Github