Approved changes feed: RSS · Atom

cpe:2.3:a:microhard_systems:microhard_systems_3g/4g_cellular_ethernet_and_serial_gateway_arbitrary_file_attacks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrohard Systems (37495898-80c9-504c-808a-a556e009affb)
ProductMicrohard Systems 3G/4G Cellular Ethernet And Serial Gateway Arbitrary File Attacks (4e805e40-44d7-577b-8c58-622314e087c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25144 vulnerable 2026-06-08 05:11:29.472262 Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor
HIGH (8.4)
Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform unauthorized file system modifications through GET and POST requests.
Published: 2025-12-24T19:27:49.167Z
Updated: 2026-02-02T15:58:15.790Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.