CVE-2021-33963 – China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_ …

Vuln ID: CVE-2021-33963

Published:  2022-01-15  10:15:07Z

Description: China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.

Source: NVD.NIST.GOV