CVE-2021-27715

CriticalCVSS 9.8

Published: 08/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

60th percentile - higher than 60% of all known CVEs

Summary

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass authentication and execute arbitrary code via crafted HTTP request.

Risk Assessment

An attacker can remotely take control of the device without authorization, leading to breach of network confidentiality and integrity, and potential use of the device as an entry point for further attacks.

Recommendation

Immediately update the device firmware to the latest available version and restrict management interface access to trusted networks only.

Original NVD description (English source)

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request.