Vulnerabilities

TI-2025-02376 CVE-2025-2716 · GHSA-5hrq-c7h5-rwmw

China Mobile P22g-CIac Samba Path path traversal

LOW 24

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00531 Published 2025-03-24 No fix listed CWE-22

TI-2025-02113 CVE-2025-2398 · GHSA-55vh-3864-h8c8

China Mobile P22g-CIac CLI su Command default credentials

HIGH 72

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00593 Published 2025-03-17 No fix listed CWE-1392

TI-2025-02112 CVE-2025-2397 · GHSA-33f4-xj2w-x86q

China Mobile P22g-CIac Telnet Service improper authorization

MEDIUM 55

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 20250305.

CVSS 4.0MEDIUM 4.8 Adjacent network High privileges No interaction EPSS 0.0025 Published 2025-03-17 No fix listed CWE-266

TI-2023-21649 CVE-2023-41011 · GHSA-733h-qv2x-3845

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent…

HIGH 82

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcut_telnet.cg component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03106 Published 2023-09-14 No fix listed CWE-77

TI-2023-21650 CVE-2023-41012 · GHSA-4c8q-5q86-gvj9

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4…

HIGH 82

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01539 Published 2023-09-05 No fix listed CWE-384

TI-2021-13240 CVE-2021-33965 · GHSA-ch37-wgm7-x46g

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface…

MEDIUM 43

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02871 Published 2022-01-18 No fix listed CWE-77

TI-2021-13239 CVE-2021-33964 · GHSA-72m3-3p32-pw2q

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface…

MEDIUM 43

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02871 Published 2022-01-18 No fix listed CWE-77

TI-2021-13238 CVE-2021-33963 · GHSA-4hg4-c65x-4827

China Mobile An Lianbao WF-1 v1.0.1 router web interface through…

MEDIUM 48

China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the parameter macType has a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0307 Published 2022-01-15 No fix listed CWE-77

TI-2021-10754 CVE-2021-30234 · GHSA-87mh-crrw-3j8f

The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1…

MEDIUM 48

The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-10753 CVE-2021-30233 · GHSA-h548-8jq3-v4vq

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows…

MEDIUM 48

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-10752 CVE-2021-30232 · GHSA-45xp-xqx7-h96p

The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1…

MEDIUM 48

The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMP_PROXY_WAN_CONNECT parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-10751 CVE-2021-30231 · GHSA-pfmv-h6q3-hx33

The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows…

MEDIUM 48

The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elink…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-10750 CVE-2021-30230 · GHSA-9f92-jpc3-5459

The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1…

MEDIUM 48

The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-10749 CVE-2021-30229 · GHSA-6j7g-69xx-g49v

The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows…

MEDIUM 43

The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02884 Published 2021-04-29 No fix listed CWE-78

TI-2021-10748 CVE-2021-30228 · GHSA-gmhw-jgv2-j5cp

The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1…

MEDIUM 48

The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink_proc_enable parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0327 Published 2021-04-29 No fix listed CWE-78

TI-2021-07879 CVE-2021-25812 · GHSA-c527-v9cp-3724

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip'…

MEDIUM 47

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02809 Published 2021-04-29 No fix listed CWE-77

TI-2019-15985 CVE-2019-1010136 · GHSA-mg47-xx2w-pxfq

Missing authentication in China Mobile GPN2.4P21-C-CN

LOW 36

ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01713 Published 2019-07-19 No fix listed CWE-306

TI-2018-14383 CVE-2018-20326 · GHSA-92g8-6cxf-frq7

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS…

LOW 35

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.04822 Published 2019-01-02 No fix listed CWE-79

Vulnerabilities

Filters