Security News > 2020 > September > Critical Vulnerabilities Expose MoFi Routers to Remote Attacks
2020-09-08 08:45
Routers made by MoFi Network are affected by several vulnerabilities, including critical flaws that can be exploited to remotely hack a device.
Some of the vulnerabilities can allow an unauthenticated, remote attacker who has access to this web interface to take complete control of the targeted router.
Some of the critical vulnerabilities can be exploited to authenticate on a device using hardcoded or weak credentials.
"The initial critical vulnerabilities have been patched," Mirch told SecurityWeek.
US-CERT was informed about the vulnerabilities on June 10 and it may have asked some ISPs to prevent remote access to their customers' routers.
News URL
Related news
- ASUS warns of critical auth bypass flaw in routers using AiCloud (source)
- ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware (source)
- SAP fixes critical Netweaver flaw exploited in attacks (source)
- Most critical vulnerabilities aren’t worth your attention (source)
- Airplay-enabled devices open to attack via “AirBorne” vulnerabilities (source)
- Fortinet fixes critical zero-day exploited in FortiVoice attacks (source)
- Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks (source)
- New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack (source)
- Critical Fortinet flaws now exploited in Qilin ransomware attacks (source)