CVE-2021-27715

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via…

published September 8, 2023

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

🚨 A crafted HTTP request is all it takes to bypass authentication in the MoFi Network MOFI4500-4GXeLTE-V2! Think of it as a restaurant where the host mistakenly lets anyone in without checking reservations. Once inside, those guests can change orders, access the kitchen, or even mess with the menu! This vulnerability could allow an attacker to execute arbitrary code on the device, potentially leading to unauthorized access or control over the router. Imagine someone hijacking your Wi-Fi and messing with your online activities—absolutely devastating!

Put simply

Think of it as a restaurant where the host mistakenly lets anyone in without checking reservations. Once inside, those guests can change orders, access the kitchen, or even mess with the menu! An issue in the router's authentication process allows attackers to bypass security checks through specially crafted HTTP requests, enabling them to execute arbitrary code remotely.

What to do

This vulnerability could allow an attacker to execute arbitrary code on the device, potentially leading to unauthorized access or control over the router. Imagine someone hijacking your Wi-Fi and messing with your online activities—absolutely devastating! To protect your network, update your MOFI4500-4GXeLTE-V2 to the latest firmware version as soon as possible. Regularly check for updates and ensure your network security settings are robust. Don't forget to review your network access controls! You've got this! Stay vigilant, and your network will be safer in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01115 · 65.8th percentile
Published
2023-09-08T00:00Z
EPSS history
Timeline
  • 08 SEP 00:00Z
    An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via…
    cvelistv5