Backdoors left unpatched in MoFi routers

guest · Sep 2, 2020

Backdoors left unpatched in MoFi routers
MoFi Network patched only six of ten reported vulnerabilities
September 2, 2020
https://www.zdnet.com/article/backdoors-left-unpatched-in-mofi-routers/

Canadian networking gear vendor MoFi Network has patched only six of ten vulnerabilities that security researchers have reported to the company earlier this year, in May.
Unpatched have remained a command injection vulnerability and three hard-coded undocumented backdoor mechanisms, all impacting the company's line of MOFI4500-4GXeLTE routers.

MOFI4500-4GXeLTE routers provide high bandwidth connections to business users via LTE (4G) uplinks and are normally deployed by internet service providers or other companies that need to ensure internet access to remote business points where normal wired internet connections aren't available.
Click to expand...

TEN SECURITY FLAWS DISCOVERED IN MOFI4500-4GXELTE ROUTERS
In a report shared with ZDNet today, cyber-security firm CRITICALSTART says it discovered ten vulnerabilities in the firmware of MOFI4500-4GXeLTE routers earlier this year.

The ten vulnerabilities included a wide range of issues, one more serious than the other, all detailed in the table below.
EXPLOITATION IS POSSIBLE IN SOME SCENARIOS
Exploiting the ten vulnerabilities only requires that an attacker have a direct line to the device's web management interface, which CRITICALSTART says is accessible by default on all network interfaces — via both LAN (internal) and WAN (external).
Click to expand...

CriticalSTART: Critical Vulnerabilities Discovered in MoFi Routers

It is important to reiterate that some of these vulnerabilities have not been fixed by the vendor as of v4.2.8std released on 8/21/2020. This includes the critical unauthenticated remote command execution vulnerability and several undocumented backdoors.
Click to expand...

Log in or Sign up

Backdoors left unpatched in MoFi routers

guest Guest

Log in or Sign up

Backdoors left unpatched in MoFi routers

guest Guest

Useful Searches