Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2018-25145

Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download

Description

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microhard Systems Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Configuration Download

  • IPn4G 1.1.0 build 1098affected

References