Vulnerability Description
A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cyber
- https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015.
- https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cyber
FAQ
What is CVE-2026-30703?
CVE-2026-30703 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input pr...
How severe is CVE-2026-30703?
CVE-2026-30703 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-30703?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.