CVE-2021-30228

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink proc enable parameter in the "api/ZRAndlink/set ZRAndlink" interface.

Recommendations For China Mobile An Lianbao WF-1 router version 1.0.1, consider restricting access to the "api/ZRAndlink/set ZRAndlink" interface until a patch is available. Avoid using the iandlink proc enable parameter in this interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.