MoFi Network MOFI4500-4GXeLTE Firmware 4.0.8-STD
Approved changes feed: RSS · Atom
cpe:2.3:o:mofinetwork:mofi4500-4gxelte_firmware:4.0.8-std:*:*:*:*:*:*:*
part: o version: 4.0.8-std update: *
| Vendor | Mofinetwork (39197630-f6ba-5f61-87f9-9c7d0a34488f) |
|---|---|
| Product | Mofi4500 4Gxelte Firmware (19d09d20-c28a-5cba-b7cd-994727a861b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13860 |
vulnerable | 2026-06-08 05:18:01.246262 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password.
Published: 2021-02-01T01:33:35.000Z
Updated: 2024-08-04T12:32:13.075Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13859 |
vulnerable | 2026-06-08 05:18:01.245917 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard management interface without a password by abusing a forgotten-password feature.
Published: 2021-02-01T01:27:07.000Z
Updated: 2024-08-04T12:32:14.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13858 |
vulnerable | 2026-06-08 05:18:01.245550 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations.
Published: 2021-02-01T01:45:44.000Z
Updated: 2024-08-04T12:32:13.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13857 |
vulnerable | 2026-06-08 05:18:01.244050 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request.
Published: 2021-02-01T01:16:47.000Z
Updated: 2024-08-04T12:32:14.126Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13856 |
vulnerable | 2026-06-08 05:18:01.241994 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes.
Published: 2021-02-01T01:18:06.000Z
Updated: 2024-08-04T12:32:13.138Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.