MoFi Network MOFI4500-4GXeLTE Firmware 4.1.5-STD
Approved changes feed: RSS · Atom
cpe:2.3:o:mofinetwork:mofi4500-4gxelte_firmware:4.1.5-std:*:*:*:*:*:*:*
part: o version: 4.1.5-std update: *
| Vendor | Mofinetwork (39197630-f6ba-5f61-87f9-9c7d0a34488f) |
|---|---|
| Product | Mofi4500 4Gxelte Firmware (19d09d20-c28a-5cba-b7cd-994727a861b3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15836 |
vulnerable | 2026-06-08 05:19:26.893315 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without proper sanitization. A crafted request can be sent to execute arbitrary commands as root.
Published: 2021-02-01T01:44:26.000Z
Updated: 2024-08-04T13:30:22.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15835 |
vulnerable | 2026-06-08 05:19:26.892829 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to authenticate as root without knowing the actual root password. An adversary with the private key can remotely authenticate to the management interface as root.
Published: 2021-02-01T01:42:32.000Z
Updated: 2024-08-04T13:30:22.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15834 |
vulnerable | 2026-06-08 05:19:26.892494 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface.
Published: 2021-02-01T01:41:31.000Z
Updated: 2024-08-04T13:30:22.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15833 |
vulnerable | 2026-06-08 05:19:26.892143 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner.
Published: 2021-02-01T01:39:35.000Z
Updated: 2024-08-04T13:30:21.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15832 |
vulnerable | 2026-06-08 05:19:26.891032 |
Details available
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key (but not the root password) can remotely reboot the device.
Published: 2021-02-01T01:36:34.000Z
Updated: 2024-08-04T13:30:21.867Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13857 |
vulnerable | 2026-06-08 05:18:01.244940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.