Description
MoFi4500路由器是一种基于OpenWRT的无线路由器。 MoFi4500路由器的/etc/shadow中存在格式错误和LuCI – OpenWrt配置接口框架中存在逻辑错误，导致用户可以使用未记录的系统帐户无需密码即可登录管理界面。
MoFi4500 路由器 /quick/wizard/ 路径存在鉴权绕过
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cyberonesecurity.com/offensive-security/critical-vulnerabilities-discovered-in-mofi-routers/
https://nvd.nist.gov/vuln/detail/CVE-2020-13859
https://qkl.seebug.org/vuldb/ssvid-98372
https://blog.mirch.io/cve/
https://osv.dev/vulnerability/CVE-2020-13859