Chinamobile An Lianbao Wf-1 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Chinamobile An Lianbao Wf-1 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2021-25812 — CVSS 9.8 (critical): Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_cli…
• CVE-2021-30228 — CVSS 9.8 (critical): The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary…
• CVE-2021-30233 — CVSS 9.8 (critical): The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via…
• CVE-2021-30234 — CVSS 9.8 (critical): The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands…
• CVE-2021-33963 — CVSS 9.8 (critical): China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and…
• CVE-2021-30230 — CVSS 9.8 (critical): The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary…
• CVE-2021-30231 — CVSS 9.8 (critical): The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via…
• CVE-2021-30232 — CVSS 9.8 (critical): The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands…
• CVE-2021-30229 — CVSS 8.8 (high): The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via…
• CVE-2021-33964 — CVSS 8.8 (high): China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST…
• CVE-2021-33965 — CVSS 8.8 (high): China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and…