GCVE - cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Chinamobile (`fc0edb1c-2931-502f-8910-417ff71df91e`)
Product	An Lianbao Wf 1 (`103d5c75-c181-5374-add6-5531a9eecb76`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-33965`	not_vulnerable	2026-06-08 05:32:12.818071	Details available China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands. Published: 2022-01-18T12:01:58.000Z Updated: 2024-08-04T00:05:52.345Z Open on db.gcve.eu Reference links https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 http://iot.10086.cn/?l=en-us https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection10.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33964`	not_vulnerable	2026-06-08 05:32:12.817582	Details available China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands. Published: 2022-01-18T11:26:52.000Z Updated: 2024-08-04T00:05:51.694Z Open on db.gcve.eu Reference links https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 http://iot.10086.cn/?l=en-us https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection11.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-33963`	not_vulnerable	2026-06-08 05:32:12.817095	Details available China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands. Published: 2022-01-15T09:16:29.000Z Updated: 2024-08-04T00:05:52.317Z Open on db.gcve.eu Reference links https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620 http://iot.10086.cn/?l=en-us https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection9.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30234`	not_vulnerable	2026-06-08 05:31:47.253259	Details available The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter. Published: 2021-04-29T15:44:04.000Z Updated: 2024-08-03T22:24:59.591Z Open on db.gcve.eu Reference links http://iot.10086.cn/?l=en-us https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection7.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30233`	not_vulnerable	2026-06-08 05:31:47.252709	Details available The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter. Published: 2021-04-29T15:44:03.000Z Updated: 2024-08-03T22:24:59.781Z Open on db.gcve.eu Reference links http://iot.10086.cn/?l=en-us https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520 https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection8.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30232`	not_vulnerable	2026-06-08 05:31:47.252392	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30231`	not_vulnerable	2026-06-08 05:31:47.252057	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30230`	not_vulnerable	2026-06-08 05:31:47.251601	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30229`	not_vulnerable	2026-06-08 05:31:47.251116	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30228`	not_vulnerable	2026-06-08 05:31:47.250521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-25812`	not_vulnerable	2026-06-08 05:30:41.587230	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.