CVSS 4.0
9.3 criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NCVE-2018-25147
Critical (9.3) in microhardcorp. EPSS 0.4% chance of exploitation in the next 30 days.
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1392
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microhardcorp:bullet-3g_firmware
- microhardcorp:bullet-lte_firmware
- microhardcorp:bulletplus_firmware
- microhardcorp:dragon-lte_firmware
- microhardcorp:ipn3gb_firmware
- microhardcorp:ipn3gii_firmware
- microhardcorp:ipn4g_firmware
- microhardcorp:ipn4gb_firmware
- microhardcorp:ipn4gii_firmware
- microhardcorp:vip4gb_firmware
- microhardcorp:vip4gb_wifi-n_firmware