CVE-2020-15835 affects Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices, where an undocumented authentication backdoor allows remote root access. This critical vulnerability (CVSS 9.8) enables an unauthenticated attacker with the private key to gain full control over the device, leading to complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high FAUCET Risk Score indicates significant potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.1.5-stdCPE matchmatch criteria | cpe:2.3:o:mofinetwork:mofi4500-4gxelte_firmware:4.1.5-std:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.