CVE-2020-15834

Name of the Vulnerable Software and Affected Versions Mofi Network MOFI4500-4GXeLTE version 4.1.5-std

Description An issue allows exposure of the wireless network password in a QR encoded picture. This picture can be downloaded by an unauthenticated adversary via the web-management interface.

Recommendations For Mofi Network MOFI4500-4GXeLTE version 4.1.5-std, consider restricting access to the web-management interface until a fix is available. As a temporary workaround, avoid using the QR encoded picture feature for wireless network password sharing. At the moment, there is no information about a newer version that contains a fix for this vulnerability.