PT-2021-9677
CVE-2020-13860
·
تاريخ النشر
2021-02-01
·
تاريخ التحديث
2021-02-04
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mofi Network MOFI4500-4GXeLTE version 4.0.8-std
Description
An issue was discovered where the one-time password algorithm for the undocumented system account
mofidev generates a predictable six-digit password.Recommendations
For Mofi Network MOFI4500-4GXeLTE version 4.0.8-std, consider changing the password for the
mofidev account to a strong, unpredictable password to minimize the risk of exploitation. As a temporary workaround, restrict access to the system account mofidev until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾