Shenzhen Yipu Commercial and Trading vulnerabilities
We track 6 vulnerabilities in Shenzhen Yipu Commercial and Trading products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2026.
Latest Shenzhen Yipu Commercial and Trading vulnerabilities
- 8.3 High severity
WDR201A WiFi Extender: Stack-based Buffer Overflow
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request w
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulner
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input int
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the set_time
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the gateway POST
- 9.3 Critical severity
WDR201A WiFi Extender: Improper Neutralization of Special Elements used in an OS Command
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the sz11gChannel