How severe is CVE-2020-15832?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mofinetwork Mofi4500-4gxelte

CVE-2020-15832

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key (but not the root password) can remotely reboot the device.

EPSS: 0.011 (62.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mofinetwork Mofi4500-4gxelte
Mofinetwork Mofi4500-4gxelte_firmware — versions 4.1.5-std
N/a — versions n/a

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-15832?: CVE-2020-15832 is a high-severity vulnerability in Mofinetwork Mofi4500-4gxelte. CVSS score: 7.5/10. Published 2021-02-01.
How severe is CVE-2020-15832?: High severity. CVSS v3 base score is 7.5 out of 10.