CVEvulnerability

CVE-2018-25146

7.1 HIGH Published 2025-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.1 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-863

Description

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.

Affected configurations

• microhardcorp ipn4g firmware 1.1.0 • microhardcorp ipn3gb firmware 2.2.0 • microhardcorp ipn4gb firmware 1.1.6 • microhardcorp ipn4gb firmware 1.1.0 • microhardcorp bullet-3g firmware 1.2.0 • microhardcorp vip4gb firmware 1.1.6 • microhardcorp vip4gb wifi-n firmware 1.1.6 • microhardcorp bullet-lte firmware 1.2.0 • microhardcorp ipn3gii firmware 1.2.0 • microhardcorp ipn4gii firmware 1.2.0 • microhardcorp bulletplus firmware 1.3.0 • microhardcorp dragon-lte firmware 1.1.0

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References