Approved changes feed: RSS · Atom

cpe:2.3:o:mofinetwork:mofi4500-4gxelte_firmware:3.6.1-std:*:*:*:*:*:*:*

part: o version: 3.6.1-std update: *

VendorMofinetwork (39197630-f6ba-5f61-87f9-9c7d0a34488f)
ProductMofi4500 4Gxelte Firmware (19d09d20-c28a-5cba-b7cd-994727a861b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13858 vulnerable 2026-06-08 05:18:01.245526 Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations.
Published: 2021-02-01T01:45:44.000Z
Updated: 2024-08-04T12:32:13.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13857 vulnerable 2026-06-08 05:18:01.244008 Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request.
Published: 2021-02-01T01:16:47.000Z
Updated: 2024-08-04T12:32:14.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.