Mofinetwork - vulnerabilities (CVEs)

11 CVEs in 4 products, 0 in the last 30 days, newest from 2023-09-08.

Products

Newest CVEs of Mofinetwork

CVE-2021-27715 - CVSS 9.8 (critical), 2023-09-08: An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via…
CVE-2020-15835 - CVSS 9.8 (critical), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability…
CVE-2020-15834 - CVSS 7.5 (high), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an…
CVE-2020-15836 - CVSS 9.8 (critical), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without…
CVE-2020-13858 - CVSS 9.8 (critical), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and…
CVE-2020-15832 - CVSS 7.5 (high), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to…
CVE-2020-13860 - CVSS 7.5 (high), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev…
CVE-2020-13859 - CVSS 9.8 (critical), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt…
CVE-2020-15833 - CVSS 9.8 (critical), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path…
CVE-2020-13857 - CVSS 7.5 (high), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET…
CVE-2020-13856 - CVSS 7.5 (high), 2021-02-01: An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains…