Chinamobile

15 CVEs across 6 Chinamobile products. Browse Chinamobile vulnerabilities, severities, and proof-of-concept exploits.

Chinamobile products with known CVEs

ProductCVEs
An Lianbao Wf-111
An Lianbao Wf-1 Firmware11
Gpn2.4p21-C-Cn2
Intelligent Home Gateway2
Intelligent Home Gateway Firmware2
Gpn2.4p21-C-Cn Firmware1
Chinamobile CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-41011Critical9.82023-09-14Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary c…
CVE-2023-41012Critical9.82023-09-05An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authenticat…
CVE-2021-33965High8.82022-01-18China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_en…
CVE-2021-33964High8.82022-01-18China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the par…
CVE-2021-33963Critical9.82022-01-15China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType…
CVE-2021-30234Critical9.82021-04-29The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharact…
CVE-2021-30233Critical9.82021-04-29The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacter…
CVE-2021-30232Critical9.82021-04-29The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharac…
CVE-2021-30231Critical9.82021-04-29The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters…
CVE-2021-30230Critical9.82021-04-29The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacha…
CVE-2021-30229High8.82021-04-29The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in…
CVE-2021-30228Critical9.82021-04-29The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metachar…
CVE-2021-25812Critical9.82021-04-29Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.
CVE-2019-1010136High7.52019-07-19ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC Wireless Router's are vulner…
CVE-2018-20326Medium6.12019-01-02ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.