CVE-2021-25812

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 version 1.01

Description A command injection issue exists, allowing for potential exploitation via the ip parameter in a POST request to the "/api/ZRQos/set online client" API endpoint.

Recommendations For version 1.01, avoid using the ip parameter in the "/api/ZRQos/set online client" API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.