Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2025-35010

Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35009

Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35008

Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35007

Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35006

Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35005

Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more
CVE-2025-35004

Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

CVSS 3.1 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Microhardcorp
Products
Bulletlte-na2 Bulletlte-na2 Firmware Ipn4gii-na2 and 1 more