CVE-2021-27715

CriticalCVSS 9.8/10Last modified Jul 9, 2026

Description

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Sep 8, 2023
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-277225.5An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "N CVE-2021-277309.8Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is F CVE-2021-277316.1Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_44 CVE-2021-277335.4In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.CVE-2021-277349.8Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the crede CVE-2021-277366.5FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xm CVE-2021-277377.5Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.CVE-2021-277387.5All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API endpoints did not inclu CVE-2021-277419.1" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"CVE-2021-277465.4"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"CVE-2021-277513.3HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the CVE-2021-277535.5"Sametime Android PathTraversal Vulnerability"