CVE-2020-15835: Mofinetwork MOFI4500-4gxelte Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to authenticate as root without knowing the actual root password. An adversary with the private key can remotely authenticate to the management interface as root.

Affected products

• Mofinetwork MOFI4500-4gxelte Firmware: version 4.1.5-std only

Published 2021-02-01. Last modified 2026-06-17.