Design/Logic Flaw

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard management interfac...

Default credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password...

Design/Logic Flaw

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes...

Default credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key but not the root password can remotely reboot the device...

CVE-2020-13858

CVE-2020-13858 affects Mofi Network MOFI4500-4GXeLTE devices running 3.6.1-std and 4.0.8-std. The issue stems from two undocumented administrator accounts (sftp and mofidev) defined in /etc/passwd, with passwords not unique across installations. This creates potential unauthorized access risk to ...

CVE-2020-13858

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations...

CVE-2020-15836

CVE-2020-15836 affects Mofi Network MOFI4500-4GXeLTE devices running 4.1.5-std. The root cause is an authentication function that passes untrusted data to the operating system without proper sanitization, enabling a crafted request to execute arbitrary commands as root. The available documents do...

CVE-2020-15836

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without proper sanitization. A crafted request can be sent to execute arbitrary commands as root...

CVE-2020-15835

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to authenticate as root without knowing the actual root password. An adversary with the private key can remotely authenticate to the...

CVE-2020-15835

CVE-2020-15835 affects Mofi Network MOFI4500-4GXeLTE devices running 4.1.5-std. The issue is an authentication function containing undocumented code that enables authenticating as root without knowing the root password. An adversary with the private key can remotely authenticate to the management...

CVE-2020-15834

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface...

CVE-2020-15834

The CVE-2020-15834 entry concerns Mofi Network MOFI4500-4GXeLTE devices running 4.1.5-std. The issue is that the wireless network password is exposed in a QR-encoded image that can be downloaded by an unauthenticated user through the device’s web-management interface, leading to unauthorized disc...

CVE-2020-15833

CVE-2020-15833 affects Mofi Network MOFI4500-4GXeLTE running 4.1.5-std where the Dropbear SSH daemon was modified to accept an alternate hard-coded path to a public key stored in /rom, enabling root access and are not modifiable by the device owner. This provides potential for unauthorized root a...

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

CVE-2020-15832

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key but not the root password can remotely reboot the device...

CVE-2020-15832

The CVE-2020-15832 issue affects Mofi Network MOFI4500-4GXeLTE with firmware 4.1.5-std. The poof.cgi script contains undocumented code that enables remote reboot, exploitable by an attacker who possesses the private key (not the root password) to remotely reboot the device. This is documented acr...

CVE-2020-13860

CVE-2020-13860 affects Mofi Network MOFI4500-4GXeLTE (firmware 4.0.8-std). The vulnerability arises from the one-time password algorithm for the undocumented system account mofidev producing a predictable six‑digit password. Multiple sources describe an attacker who can reverse firmware to discov...

CVE-2020-13860

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password...

CVE-2020-13859

CVE-2020-13859 affects Mofi Network MOFI4500-4GXeLTE devices running 4.0.8-std. A format error in /etc/shadow plus a logic bug in the LuCI/OpenWrt configuration interface enables the undocumented user account “mofidev” to access cgi-bin/luci/quick/wizard without a password via a forgotten-passwor...

CVE-2020-13859

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard management interfac...