Security Advisory

CVE-2021-33963

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-15 09:16:29
Last updated 2024-08-04 00:05:52
Assigner mitre
State PUBLISHED

Description

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.