CVE-2020-13856

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes...

CVE-2020-13856

CVE-2020-13856 affects the Mofi Network MOFI4500-4GXeLTE devices (4.0.8-std). An unauthenticated user can download the support file that contains sensitive data, including cleartext credentials and password hashes, exposing confidentiality. Connected sources (NVD/RH/CNVD) corroborate unauthentica...

CVE-2020-13857

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request...

CVE-2020-13857

CVE-2020-13857 affects Mofi Network MOFI4500-4GXeLTE devices running 3.6.1-std and 4.0.8-std. The issue allows an unauthenticated HTTP GET request to /cgi-bin/poof.cgi to reboot the device. Connected sources (NVD, Red Hat advisory, CNVD, and others) confirm the reboot via poof.cgi without authent...

Mofi Network MOFI4500-4GXeLTE 安全漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized RCE vulnerability exists in Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the authentication function passing untrusted data to the operating system without proper destruction...

Mofi Network MOFI4500-4GXeLTE 安全漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which can be exploited by an attacker to access /cgi-bin/poof.cgi to remotely reboot the device...

Mofi Network MOFI4500-4GXeLTE 信息泄露漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized information leakage vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to access the QR code where /wifi.png can be used to obtain the Wi-Fi...

Mofi Network MOFI4500-4GXeLTE Unauthorized RCE Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized RCE vulnerability exists in Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the authentication function passing untrusted data to the operating system without proper destruction...

Mofi Network MOFI4500-4GXeLTE Remote Reboot Backdoor Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A remote reboot backdoor vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to reboot the device by accessing /cgi-bin/poof.cgi with a private key...

Mofi Network MOFI4500-4GXeLTE Backdoor Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the fact that the Dropbear SSH daemon has been modified to accept an alternate hardcoded path to a public...

Unspecified Vulnerability in Mofi Network MOFI4500-4GXeLTE

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which stems from the inclusion of two unarchived administrator accounts. sftp and mofidev accounts are defined in the etc...

Mofi Network MOFI4500-4GXeLTE Authentication Bypass Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An authentication bypass vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. An attacker can exploit this vulnerability to remotely authenticate to the management interface as the root user...

Mofi Network MOFI-GXeLTE Authentication Bypass Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to log in to the mofidev user with an arbitrary password, and then change the password of the roo...

Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to gain unauthorized access to /systemlog.tar.gz to obtain information such as /etc/shadow and...

Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized information leakage vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to access the QR code where /wifi.png can be used to obtain the Wi-Fi...

Mofi Network MOFI4500-4GXeLTE Unauthorized Remote Reboot

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which can be exploited by an attacker to access /cgi-bin/poof.cgi to remotely reboot the device...

Mofi Network MOFI4500-4GXeLTE Security Feature Issue Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to know the generation algorithm via firmware reverse, and directly calculate the one-time passwo...