CVEs-PoC/2021/CVE-2021-33962.md

CVE-2021-33962

Description

China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_device component.

POC

Reference

• https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/pokerfacett/MY_CVE_CREDIT