Ipn4Gii / Bullet Lte Firmware
Approved changes feed: RSS · Atom
cpe:2.3:a:microhard:ipn4gii_/_bullet-lte_firmware:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Microhard (43aabe0f-aeff-5ad5-8948-0a02ef2ad0f0) |
|---|---|
| Product | Ipn4Gii / Bullet Lte Firmware (b40af821-0252-5176-b472-05e8e3a87f99) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-35010 |
vulnerable | 2026-06-08 07:20:59.776968 |
Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:06:16.368Z
Updated: 2025-06-09T03:16:04.477Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35009 |
vulnerable | 2026-06-08 07:20:59.775939 |
Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:06:05.426Z
Updated: 2025-06-09T03:17:10.831Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35008 |
vulnerable | 2026-06-08 07:20:59.768649 |
Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:52.090Z
Updated: 2025-06-09T03:18:02.029Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35007 |
vulnerable | 2026-06-08 07:20:59.767838 |
Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:38.698Z
Updated: 2025-06-09T03:18:53.105Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35006 |
vulnerable | 2026-06-08 07:20:59.766915 |
Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:25.706Z
Updated: 2025-06-09T03:19:46.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35005 |
vulnerable | 2026-06-08 07:20:59.765855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35004 |
vulnerable | 2026-06-08 07:20:59.760477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.