Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microhard Systems | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway CSRF Vulnerabilities | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
No data.
| Vendor | Product | Versions |
|---|---|---|
| Microhardcorp | Ipn4g | — |
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.221% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microhardcorp bullet-3g
Microhardcorp bullet-3g Firmware Microhardcorp bullet-lte Microhardcorp bullet-lte Firmware Microhardcorp bulletplus Microhardcorp bulletplus Firmware Microhardcorp dragon-lte Microhardcorp dragon-lte Firmware Microhardcorp ipn3gb Microhardcorp ipn3gb Firmware Microhardcorp ipn3gii Microhardcorp ipn3gii Firmware Microhardcorp ipn4g Firmware Microhardcorp ipn4gb Microhardcorp ipn4gb Firmware Microhardcorp ipn4gii Microhardcorp ipn4gii Firmware Microhardcorp vip4gb Microhardcorp vip4gb Firmware Microhardcorp vip4gb Wifi-n Microhardcorp vip4gb Wifi-n Firmware |
|
| CPEs | cpe:2.3:h:microhardcorp:bullet-3g:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:bullet-lte:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:bulletplus:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:dragon-lte:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:ipn3gb:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:ipn3gii:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:ipn4g:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:ipn4gb:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:ipn4gii:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:vip4gb:-:*:*:*:*:*:*:* cpe:2.3:h:microhardcorp:vip4gb_wifi-n:-:*:*:*:*:*:*:* cpe:2.3:o:microhardcorp:bullet-3g_firmware:1.2.0:build1076:*:*:*:*:*:* cpe:2.3:o:microhardcorp:bullet-3g_firmware:1.2.0:reva_build1032:*:*:*:*:*:* cpe:2.3:o:microhardcorp:bullet-lte_firmware:1.2.0:build1078:*:*:*:*:*:* cpe:2.3:o:microhardcorp:bulletplus_firmware:1.3.0:build1036:*:*:*:*:*:* cpe:2.3:o:microhardcorp:dragon-lte_firmware:1.1.0:build1036:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn3gb_firmware:2.2.0:build2160:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn3gii_firmware:1.2.0:build1076:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn4g_firmware:1.1.0:build1098:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1086:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1090-2:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.6:build1184-14:*:*:*:*:*:* cpe:2.3:o:microhardcorp:ipn4gii_firmware:1.2.0:build1078:*:*:*:*:*:* cpe:2.3:o:microhardcorp:vip4gb_firmware:1.1.6:build_1204:*:*:*:*:*:* cpe:2.3:o:microhardcorp:vip4gb_firmware:1.1.6:rev3_build1184-14:*:*:*:*:*:* cpe:2.3:o:microhardcorp:vip4gb_wifi-n_firmware:1.1.6:rev2_build1196:*:*:*:*:*:* |
|
| Vendors & Products |
Microhardcorp bullet-3g
Microhardcorp bullet-3g Firmware Microhardcorp bullet-lte Microhardcorp bullet-lte Firmware Microhardcorp bulletplus Microhardcorp bulletplus Firmware Microhardcorp dragon-lte Microhardcorp dragon-lte Firmware Microhardcorp ipn3gb Microhardcorp ipn3gb Firmware Microhardcorp ipn3gii Microhardcorp ipn3gii Firmware Microhardcorp ipn4g Firmware Microhardcorp ipn4gb Microhardcorp ipn4gb Firmware Microhardcorp ipn4gii Microhardcorp ipn4gii Firmware Microhardcorp vip4gb Microhardcorp vip4gb Firmware Microhardcorp vip4gb Wifi-n Microhardcorp vip4gb Wifi-n Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microhardcorp
Microhardcorp ipn4g |
|
| Vendors & Products |
Microhardcorp
Microhardcorp ipn4g |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change admin passwords, add new users, and modify system settings by tricking authenticated users into loading a specially crafted page. | |
| Title | Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface | |
| Weaknesses | CWE-352 | |
| References |
| |
| Metrics |
cvssV3_1
|