I discovered several vulnerabilities in the MoFi4500 LTE router. Several vulnerabilities have not been patched, including an unauthenticated remote command injection and several undocumented backdoors. The full write-up can be viewed at https://www.criticalstart.com/critical-vulnerabilities-discovered-in-mofi-routers/.
Media Coverage
- https://www.cyberscoop.com/mofi-networks-routers-zero-day-critical-start/
- https://www.zdnet.com/article/backdoors-left-unpatched-in-mofi-routers/
Follow the conversation on Twitter
Rich Mirch 