CVE-2021-33964

CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

Source: CVE-2021-33964

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다