CVEvulnerability

CVE-2020-15832

7.5 HIGH Published 2021-02-01 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2021-02-01
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key (but not the root password) can remotely reboot the device.

Affected configurations

• mofinetwork mofi4500-4gxelte firmware 4.1.5-std

References

https://mofinetwork.com/index.php?main_page=page&id=14 Patch, Vendor Advisory
https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/ Technical Description, Third Party Advisory
https://mofinetwork.com/index.php?main_page=page&id=14 Patch, Vendor Advisory
https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/ Technical Description, Third Party Advisory