critical9.8
CVE-2020-13858
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices.
Impact
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mofinetwork | Mofi4500-4gxelte Firmware | Versions 3.6.1-std, 4.0.8-std |