CVE-2021-33962

China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_device component.

• CWE-78

• http://iot.10086.cn/?l=en-usThird Party Advisory
• https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection12.mdBroken Link
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520Third Party Advisory
• https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620Broken Link
• http://iot.10086.cn/?l=en-usThird Party Advisory
• https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection12.mdBroken Link
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520Third Party Advisory
• https://www.ebuy7.com/item/china-mobile-wireless-router-qualcomm-qiki-wifi6-routing-mesh-network-home-5g-dual-frequency-double-gigabit-port-wall-wall-high-speed-%E2%80%8B%E2%80%8Bhigh-power-enhanced-dormitory-students-an-lianbao-wf-1-628692180620Broken Link

Published

Jan 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33949An issue in FeMiner WMS v1.1 allows attackers to execute arb…9.8
• CVE-2021-3395A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.…5.4
• CVE-2021-33950An issue discovered in OpenKM v6.3.10 allows attackers to ob…7.5
• CVE-2021-33959Plex media server 1.21 and before is vulnerable to ddos refl…7.5
• CVE-2021-3396OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 bef…8.8
• CVE-2021-33961A Cross Site Scripting (XSS) vulnerabililty exists in enhanc…6.1
• CVE-2021-33963China Mobile An Lianbao WF-1 v1.0.1 router web interface thr…9.8
• CVE-2021-33964China Mobile An Lianbao WF-1 V1.0.1 router provides a web in…8.8
• CVE-2021-33965China Mobile An Lianbao WF-1 V1.0.1 router provides a web in…8.8
• CVE-2021-33966Cross site scripting (XSS) vulnerability in spotweb 1.4.9, a…5.4
• CVE-2021-33970Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170…10
• CVE-2021-33971Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https:/…7.8