CVE-2025-35006

🗓️ 08 Jun 2025 21:05:25Reported by AHAType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 37 Views

Vulnerability in Microhard products allows privilege escalation via AT+MFPORTFWD command injection.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-35006	31 Dec 200023:00	–	circl
CNNVD	Microhard Bullet-LTE和Microhard IPn4Gii-NA2 安全漏洞	8 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-35006 Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection	8 Jun 202521:05	–	cvelist
EUVD	EUVD-2025-17402	3 Oct 202520:07	–	euvd
NVD	CVE-2025-35006	8 Jun 202521:15	–	nvd
OSV	CVE-2025-35006	8 Jun 202521:15	–	osv
Positive Technologies	PT-2025-24378 · Microhard · Ipn4Gii-Na2 +1	27 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-35006	10 Jun 202521:19	–	redhatcve
Vulnrichment	CVE-2025-35006 Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection	8 Jun 202521:05	–	vulnrichment

NVD

Node

microhardcorp ipn4gii-na2_firmwareRange≤1.2.0-r1132

AND

microhardcorp ipn4gii-na2Match-

Node

microhardcorp bulletlte-na2_firmwareRange≤1.2.0-r1132

AND

microhardcorp bulletlte-na2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "IPn4Gii / Bullet-LTE Firmware",
    "vendor": "Microhard",
    "versions": [
      {
        "lessThanOrEqual": "v1.2.0-r1132",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
microhardcorp	www.microhardcorp.com/BulletLTE-NA2.php
microhardcorp	www.microhardcorp.com/IPn4Gii-NA2.php
takeonme	www.takeonme.org/cves/cve-2025-35006/
support	www.support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware

12 Jan 2026 16:54Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.1

EPSS0.00385

SSVC

CWE-88