CVE-2018-25144

The CVE-2018-25144 issue affects Microhard Systems IPn4G 1.1.0. A vulnerability in the hidden system-editor.sh script allows authenticated attackers to read, modify, or delete arbitrary files by abusing unsanitized parameters (path, savefile, edit, delfile) via GET/POST requests. Exploitation det...

The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 allows a hacker to enhance their privileges.

The vulnerability of the AT+MMNAME command in the microprogramming software of Microhard IPn4Gii-NA2 and BulletLTE-NA2 lies in the implementation or modification of certain arguments. Exploiting this vulnerability can allow attackers to enhance their privileges...