Microhard

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Microhard records in CISA KEV

No Microhard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bullet-lte Firmware 9 records HIGH Bullet-3g Firmware 7 records HIGH Bulletlte-na2 Firmware 7 records HIGH Bulletplus Firmware 7 records HIGH Dragon-lte Firmware 7 records HIGH Ipn3gb Firmware 7 records HIGH Ipn3gii Firmware 7 records HIGH Ipn4g Firmware 7 records HIGH

Records

7 records in Ipn3gb Firmware · all components

TI-2018-15373 CVE-2018-25147 · GHSA-r64v-2m5c-fmx7

Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

HIGH 81

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00388 Published 2025-12-24 No fix listed CWE-1392

TI-2018-15369 CVE-2018-25143 · GHSA-x8gg-ghxq-c254

Microhard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh Service

HIGH 79

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00601 Published 2025-12-24 No fix listed CWE-78

TI-2018-15374 CVE-2018-25148 · GHSA-jmmc-j836-r5v7

Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface

HIGH 73

Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup scripts.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00779 Published 2025-12-24 No fix listed CWE-266

TI-2018-15370 CVE-2018-25144 · GHSA-gpch-6qpg-rp8g

Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor

HIGH 73

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00482 Published 2025-12-24 No fix listed CWE-22

TI-2018-15372 CVE-2018-25146 · GHSA-9wqg-38fc-34m9

Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

MEDIUM 64

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00488 Published 2025-12-24 No fix listed CWE-863

TI-2018-15371 CVE-2018-25145 · GHSA-cm58-6j6x-c433

Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download

MEDIUM 64

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0047 Published 2025-12-24 No fix listed CWE-552

TI-2018-15375 CVE-2018-25149 · GHSA-64rh-68mc-5mmx

Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface

MEDIUM 56

Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-12-24 No fix listed CWE-352

Open these records in search →

Critical	2
High	13
Medium	1
Low	0
No CVSS	0