Vulnerabilities

TI-2018-15375 CVE-2018-25149 · GHSA-64rh-68mc-5mmx

Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface

MEDIUM 56

Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00221 Published 2025-12-24 No fix listed CWE-352

TI-2018-15374 CVE-2018-25148 · GHSA-jmmc-j836-r5v7

Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface

HIGH 73

Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup scripts.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00779 Published 2025-12-24 No fix listed CWE-266

TI-2018-15373 CVE-2018-25147 · GHSA-r64v-2m5c-fmx7

Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

HIGH 81

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00388 Published 2025-12-24 No fix listed CWE-1392

TI-2018-15372 CVE-2018-25146 · GHSA-9wqg-38fc-34m9

Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

MEDIUM 64

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00488 Published 2025-12-24 No fix listed CWE-863

TI-2018-15371 CVE-2018-25145 · GHSA-cm58-6j6x-c433

Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download

MEDIUM 64

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0047 Published 2025-12-24 No fix listed CWE-552

TI-2018-15370 CVE-2018-25144 · GHSA-gpch-6qpg-rp8g

Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor

HIGH 73

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00482 Published 2025-12-24 No fix listed CWE-22

TI-2018-15369 CVE-2018-25143 · GHSA-x8gg-ghxq-c254

Microhard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh Service

HIGH 79

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00601 Published 2025-12-24 No fix listed CWE-78

TI-2020-13173 CVE-2020-17407 · GHSA-hpgj-wfpp-wx53

Stack-based buffer overflow in Microhard Bullet-LTE

MEDIUM 52

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06812 Published 2020-10-13 Fixed in v1.2.0-r1112 CWE-121

TI-2020-13172 CVE-2020-17406 · GHSA-9hwm-q6fg-r54g

OS command injection in Microhard Bullet-LTE

MEDIUM 46

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05342 Published 2020-10-13 Fixed in v1.2.0-r1112 CWE-78

Vulnerabilities

Filters