CVE-2020-13858 : Security Advisory and Response

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices, where two undocumented administrator accounts exist, posing a security risk.

Understanding CVE-2020-13858

This CVE identifies a vulnerability in Mofi Network MOFI4500-4GXeLTE devices that could compromise system security.

What is CVE-2020-13858?

The vulnerability involves the presence of two undocumented administrator accounts, 'sftp' and 'mofidev', with non-unique passwords across installations.

The Impact of CVE-2020-13858

The existence of these accounts could allow unauthorized access to the devices, potentially leading to data breaches or unauthorized system modifications.

Technical Details of CVE-2020-13858

This section provides more in-depth technical information about the vulnerability.

Vulnerability Description

The devices contain two hidden administrator accounts, 'sftp' and 'mofidev', with passwords that are not unique across installations, increasing the risk of unauthorized access.

Affected Systems and Versions

Mofi Network MOFI4500-4GXeLTE 3.6.1-std
Mofi Network MOFI4500-4GXeLTE 4.0.8-std

Exploitation Mechanism

Attackers could potentially exploit these undocumented accounts to gain unauthorized access to the affected devices.

Mitigation and Prevention

Protecting against this vulnerability is crucial to maintaining system security.

Immediate Steps to Take

Disable or remove the undocumented 'sftp' and 'mofidev' accounts from the devices.
Change all default passwords and ensure they are unique.

Long-Term Security Practices

Regularly monitor and audit administrator accounts on the devices.
Implement strong password policies and multi-factor authentication.

Patching and Updates

Check for firmware updates or patches provided by Mofi Network to address this vulnerability.