CVE-2020-15835

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE version 4.1.5-std

Description An issue was discovered in the authentication function, which contains undocumented code allowing authentication as root without knowing the actual root password. An adversary with the private key can remotely authenticate to the management interface as root.

Recommendations For Mofi Network MOFI4500-4GXeLTE version 4.1.5-std, consider disabling remote access to the management interface until a patch is available to prevent exploitation of the undocumented code in the authentication function. Restrict access to the management interface to minimize the risk of unauthorized root access.