GCVE - cpe:2.3:h:microhardcorp:bullet-lte:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:microhardcorp:bullet-lte:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Microhardcorp (`fccf9c39-5ae8-53e8-b769-c9f607c76990`)
Product	Bullet Lte (`2ef1dadc-1a02-5df2-99e5-3ffb66d45f53`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-17407`	not_vulnerable	2026-06-08 05:20:56.399089	Details available CRITICAL (9.8) This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of authentication headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10596. Published: 2020-10-13T17:10:43.000Z Updated: 2024-08-04T13:53:17.052Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-20-1206/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17406`	not_vulnerable	2026-06-08 05:20:56.398412	Details available HIGH (8.8) This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ping parameter provided to tools.sh. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10595. Published: 2020-10-13T17:10:43.000Z Updated: 2024-08-04T13:53:16.722Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-20-1205/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25149`	not_vulnerable	2026-06-08 05:11:29.495459	Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface MEDIUM (6.5) Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change admin passwords, add new users, and modify system settings by tricking authenticated users into loading a specially crafted page. Published: 2025-12-24T19:27:51.383Z Updated: 2026-01-26T15:55:00.365Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45034 http://www.microhardcorp.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5478.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25148`	not_vulnerable	2026-06-08 05:11:29.490533	Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface HIGH (8.8) Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup scripts. Attackers can exploit hidden admin features to execute arbitrary commands with root privileges, including starting services, disabling firewalls, and writing files to the system. Published: 2025-12-24T19:27:50.947Z Updated: 2025-12-24T20:25:14.760Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45038 http://www.microhardcorp.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5479.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25147`	not_vulnerable	2026-06-08 05:11:29.485955	Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass HIGH (7.5) Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations. Published: 2025-12-24T19:27:50.490Z Updated: 2026-07-28T01:46:38.296Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45040 http://www.microhardcorp.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5480.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25146`	not_vulnerable	2026-06-08 05:11:29.481914	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25145`	not_vulnerable	2026-06-08 05:11:29.477650	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25144`	not_vulnerable	2026-06-08 05:11:29.472836	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25143`	not_vulnerable	2026-06-08 05:11:29.465060	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.