The majority of 3G and 4G USB modems offered by mobile operators to their customers have vulnerabilities in their Web-based management interfaces that could be exploited remotely when users visit compromised websites. The flaws could allow attackers to steal or manipulate text messages, contacts, Wi-Fi settings or the DNS configuration of affected modems, but also to execute arbitrary commands on their underlying operating systems.