CVE-2018-25147 Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
CriticalCVSS 9.3
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microhardcorp ipn4g firmware | = 1.1.0-build1098 | No fix listed |
| microhardcorp ipn3gb firmware | = 2.2.0-build2160 | No fix listed |
| microhardcorp ipn4gb firmware | = 1.1.6-build1184-14 | No fix listed |
| microhardcorp ipn4gb firmware | = 1.1.0-rev2_build1090-2 | No fix listed |
| microhardcorp ipn4gb firmware | = 1.1.0-rev2_build1086 | No fix listed |
| microhardcorp bullet-3g firmware | = 1.2.0-reva_build1032 | No fix listed |
| microhardcorp bullet-3g firmware | = 1.2.0-build1076 | No fix listed |
| microhardcorp vip4gb firmware | = 1.1.6-build_1204 | No fix listed |
| microhardcorp vip4gb firmware | = 1.1.6-rev3_build1184-14 | No fix listed |
| microhardcorp vip4gb wifi-n firmware | = 1.1.6-rev2_build1196 | No fix listed |
| microhardcorp bullet-lte firmware | = 1.2.0-build1078 | No fix listed |
| microhardcorp ipn3gii firmware | = 1.2.0-build1076 | No fix listed |
| microhardcorp ipn4gii firmware | = 1.2.0-build1078 | No fix listed |
| microhardcorp bulletplus firmware | = 1.3.0-build1036 | No fix listed |
| microhardcorp dragon-lte firmware | = 1.1.0-build1036 | No fix listed |
| Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials | = IPn4G 1.1.0 build 1098 | No fix listed |
References
- Microhard Systems Product Homepage product
- ExploitDB-45040 exploit
- Zero Science Lab Disclosure (ZSL-2018-5480) exploit third-party-advisory