PT-2021-18678 · China Mobile · An Lianbao Wf-1

Published 2021-04-29 · Updated 2022-05-03 · CVE-2021-30231

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in certain parameters. Specifically, the "api/zrDm/set ZRElink" interface is vulnerable. The parameters that can be exploited include bssaddr, abiaddr, devtoken, devid, elinksync, and elink proc enable.

Recommendations For China Mobile An Lianbao WF-1 router version 1.0.1, as a temporary workaround, consider restricting access to the "api/zrDm/set ZRElink" interface until a patch is available. Avoid using the parameters bssaddr, abiaddr, devtoken, devid, elinksync, and elink proc enable in this interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-30231

Affected Products

An Lianbao Wf-1

References · 5

• 🔥❌ https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection4.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2021-30231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30231 · Security Note
• http://iot.10086.cn/?l=en-us · Note
• https://cnvd.org.cn/flaw/show/CNVD-2021-03520 · Note