CVE-2021-30233

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv vlan parameter in the "api/ZRIptv/setIptvInfo" interface.

Recommendations For China Mobile An Lianbao WF-1 router version 1.0.1, as a temporary workaround, consider restricting access to the "api/ZRIptv/setIptvInfo" interface until a patch is available. Avoid using the iptv vlan parameter in the affected interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.