CVE-2020-13860

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE version 4.0.8-std

Description An issue was discovered where the one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password.

Recommendations For Mofi Network MOFI4500-4GXeLTE version 4.0.8-std, consider changing the password for the mofidev account to a strong, unpredictable password to minimize the risk of exploitation. As a temporary workaround, restrict access to the system account mofidev until a patch is available.