Vulnerability Description
Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chinamobile | An Lianbao Wf-1 Firmware | 1.0.1 |
| Chinamobile | An Lianbao Wf-1 | - |
Related Weaknesses (CWE)
References
- http://iot.10086.cn/?l=en-usProduct
- https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20LianThird Party Advisory
- https://www.zhipinmall.com/prodetail?id=1266#skuId=3020Third Party Advisory
- http://iot.10086.cn/?l=en-usProduct
- https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20LianThird Party Advisory
- https://www.zhipinmall.com/prodetail?id=1266#skuId=3020Third Party Advisory
FAQ
What is CVE-2021-25812?
CVE-2021-25812 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.
How severe is CVE-2021-25812?
CVE-2021-25812 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-25812?
Check the references section above for vendor advisories and patch information. Affected products include: Chinamobile An Lianbao Wf-1 Firmware, Chinamobile An Lianbao Wf-1.