Microhardcorp Bullet-3g Firmware
7 CVEs affecting Microhardcorp Bullet-3g Firmware. Latest disclosed: 2025-12-24. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25148 | High | 8.8 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create cront… |
CVE-2018-25143 | High | 8.8 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. At… |
CVE-2018-25144 | High | 8.4 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read… |
CVE-2018-25146 | High | 8.1 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attac… |
CVE-2018-25147 | High | 7.5 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these defa… |
CVE-2018-25149 | Medium | 6.5 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent… |
CVE-2018-25145 | Medium | 6.5 | 2025-12-24 | Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configura… |