CVE-2020-15832

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE version 4.1.5-std

Description An issue was discovered in the poof.cgi script, which contains undocumented code allowing remote reboot of the device. An adversary with the private key, but not the root password, can exploit this to remotely reboot the device.

Recommendations For Mofi Network MOFI4500-4GXeLTE version 4.1.5-std, consider disabling the poof.cgi script as a temporary workaround until a patch is available. Restrict access to the private key to minimize the risk of exploitation.