CVE-2020-13857: Undefined Security Weakness

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request...

CVE-2020-13858: Use of Hard-coded Credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations...

CVE-2020-13859: Improper Authentication

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard management interfac...

Mofi Network MOFI4500-4GXeLTE 安全漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which can be exploited by an attacker to access /cgi-bin/poof.cgi to remotely reboot the device...

Mofi Network MOFI4500-4GXeLTE 安全漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized RCE vulnerability exists in Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the authentication function passing untrusted data to the operating system without proper destruction...

Mofi Network MOFI4500-4GXeLTE 信息泄露漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized information leakage vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to access the QR code where /wifi.png can be used to obtain the Wi-Fi...

Mofi Network MOFI4500-4GXeLTE Backdoor Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the fact that the Dropbear SSH daemon has been modified to accept an alternate hardcoded path to a public...

Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to gain unauthorized access to /systemlog.tar.gz to obtain information such as /etc/shadow and...

Mofi Network MOFI4500-4GXeLTE Unauthorized Remote Reboot

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which can be exploited by an attacker to access /cgi-bin/poof.cgi to remotely reboot the device...

Mofi Network MOFI-GXeLTE Authentication Bypass Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to log in to the mofidev user with an arbitrary password, and then change the password of the roo...

Mofi Network MOFI4500-4GXeLTE Security Feature Issue Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices, which can be exploited by an attacker to know the generation algorithm via firmware reverse, and directly calculate the one-time passwo...

Mofi Network MOFI4500-4GXeLTE Unauthorized Information Disclosure Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized information leakage vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to access the QR code where /wifi.png can be used to obtain the Wi-Fi...

Mofi Network MOFI4500-4GXeLTE Authentication Bypass Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An authentication bypass vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. An attacker can exploit this vulnerability to remotely authenticate to the management interface as the root user...

Mofi Network MOFI4500-4GXeLTE Remote Reboot Backdoor Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A remote reboot backdoor vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, which can be exploited by an attacker to reboot the device by accessing /cgi-bin/poof.cgi with a private key...

Unspecified Vulnerability in Mofi Network MOFI4500-4GXeLTE

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, which stems from the inclusion of two unarchived administrator accounts. sftp and mofidev accounts are defined in the etc...

Mofi Network MOFI4500-4GXeLTE Unauthorized RCE Vulnerability

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. An unauthorized RCE vulnerability exists in Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the authentication function passing untrusted data to the operating system without proper destruction...

PT-2020-13736

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE version 4.0.8-std Description An issue was discovered where authentication is not required to download the support file, which contains sensitive information such as cleartext credentials and password hashes...