Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm
Posted by deepcore on April 14, 2022 – 1:11 am
Verizon’s 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device’s MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the string LTEFemto resulting in something like LTEFemtoD080 as the default Admin password. Versions GA4.38 through 0.4.038.2131 are affected.
Post a reply
You must be logged in to post a comment.