Approved changes feed: RSS · Atom

cpe:2.3:h:microhardcorp:bulletlte-na2:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMicrohardcorp (fccf9c39-5ae8-53e8-b769-c9f607c76990)
ProductBulletlte Na2 (14f71fdf-21bb-55de-8d53-9da4dd1c43c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-35010 not_vulnerable 2026-06-03 15:00:51.873714 Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:06:16.368Z
Updated: 2025-06-09T03:16:04.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35009 not_vulnerable 2026-06-03 15:00:51.873130 Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:06:05.426Z
Updated: 2025-06-09T03:17:10.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35008 not_vulnerable 2026-06-03 15:00:51.872420 Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:52.090Z
Updated: 2025-06-09T03:18:02.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35007 not_vulnerable 2026-06-03 15:00:51.871601 Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:38.698Z
Updated: 2025-06-09T03:18:53.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35006 not_vulnerable 2026-06-03 15:00:51.870798 Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:25.706Z
Updated: 2025-06-09T03:19:46.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35005 not_vulnerable 2026-06-03 15:00:51.869999 Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:15.936Z
Updated: 2025-06-09T03:20:54.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35004 not_vulnerable 2026-06-03 15:00:51.869224 Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection
HIGH (7.1)
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
Published: 2025-06-08T21:05:01.219Z
Updated: 2025-06-09T03:22:14.184Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.