How much more or less secure is using a mobile (3G/4G) router to connect to the internet?
I know using tor over the internet should render eavesdropping useless, but excluding physical access, what kinds of attacks or exploits are possible on mobile routers?
Besides downgrading, what kinds of attacks are possible using IMSI-catchers? Since IMSI-catchers are usually computers or run on computers, can an attacker with an IMSI-catcher use it to somehow leverage the SIM module and gain access to the router?
I'm interested in exploits or attacks similar to this but launched from the mobile network/IMSI-catcher instead of breaking in through WiFi.
UPDATE: I found this pretty recent article which seems to describe what I'm asking about. The article mentions
These AT commands are all exposed via the phone's USB interface, meaning an attacker would have to either gain access to a user's device, or hide a malicious component inside USB docks, chargers, or charging stations. . . .
. . . They also plan on testing Apple devices, but also if AT commands are available via remote access vectors such as a phone's WiFi or Bluetooth connections.
which, if I'm not mistaken, means that the AT commands are executed from a (possibly infected or compromised) computer that the phone is connected to,
and also that
Once an attacker is connected via the USB to a target's phone, he can use one of the phone's secret AT commands to rewrite device firmware, bypass Android security mechanisms, exfiltrate sensitive device information, perform screen unlocks, or even inject touch events solely through the use of AT commands.
which what I'm concerned about.
The attack at the moment seems only to target phones, now I'm wondering if something like this should be possible for mobile routers, too.