Verizon 4G LTE Network Extender Weak Credentials Algorithm

Verizon’s 4G LTE Network Extender is utilising a weak default admin password generation algorithm. The password is generated using the last 4 values from device’s MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the string ‘LTEFemto’ resulting in something like ‘LTEFemtoD080’ as the default Admin password.