Approved changes feed: RSS · Atom

cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*

part: o version: 1.0.1 update: *

VendorChinamobile (fc0edb1c-2931-502f-8910-417ff71df91e)
ProductAn Lianbao Wf 1 Firmware (3036e884-a0ee-5085-8390-88b2e2cf1760)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33965 vulnerable 2026-06-08 05:32:12.818048 Details available
China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.
Published: 2022-01-18T12:01:58.000Z
Updated: 2024-08-04T00:05:52.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33964 vulnerable 2026-06-08 05:32:12.817559 Details available
China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.
Published: 2022-01-18T11:26:52.000Z
Updated: 2024-08-04T00:05:51.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33963 vulnerable 2026-06-08 05:32:12.816527 Details available
China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.
Published: 2022-01-15T09:16:29.000Z
Updated: 2024-08-04T00:05:52.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30234 vulnerable 2026-06-08 05:31:47.253136 Details available
The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter.
Published: 2021-04-29T15:44:04.000Z
Updated: 2024-08-03T22:24:59.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30233 vulnerable 2026-06-08 05:31:47.252688 Details available
The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter.
Published: 2021-04-29T15:44:03.000Z
Updated: 2024-08-03T22:24:59.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30232 vulnerable 2026-06-08 05:31:47.252370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30231 vulnerable 2026-06-08 05:31:47.252035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30230 vulnerable 2026-06-08 05:31:47.251578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30229 vulnerable 2026-06-08 05:31:47.251091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30228 vulnerable 2026-06-08 05:31:47.249916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25812 vulnerable 2026-06-08 05:30:41.586343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.