Beveiligingsadvies

CVE-2021-33964

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-01-18 11:26:52
Laatst bijgewerkt 2024-08-04 00:05:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.