Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2018-25147

Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jenkins Microhardcorp
Products
Credentials Bullet-3g Bullet-3g Firmware and 20 more
CVE-2018-25145

Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Edx Microhardcorp
Products
Configuration Bullet-3g Bullet-3g Firmware and 20 more
CVE-2018-25146

Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Microhardcorp
Products
Bullet-3g Bullet-3g Firmware Bullet-lte and 19 more
CVE-2018-25144

Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform unauthorized file system modifications through GET and POST requests.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Microhardcorp
Products
Bullet-3g Bullet-3g Firmware Bullet-lte and 19 more
CVE-2018-25143

Microhard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh Service

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root privileges.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Microhardcorp
Products
Bullet-3g Bullet-3g Firmware Bullet-lte and 19 more
CVE-2018-25149

Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface

Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change admin passwords, add new users, and modify system settings by tricking authenticated users into loading a specially crafted page.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Microhardcorp
Products
Bullet-3g Bullet-3g Firmware Bullet-lte and 19 more
CVE-2018-25148

Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface

Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup scripts. Attackers can exploit hidden admin features to execute arbitrary commands with root privileges, including starting services, disabling firewalls, and writing files to the system.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Microhardcorp
Products
Bullet-3g Bullet-3g Firmware Bullet-lte and 19 more