PT-2026-46154

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Management API endpoints for cellular eSIM allocation fail to validate caller authorization. This flaw allows remote profiles to be rewritten or deleted...

CVE-2017-20236 ProSoft Technology ICX35-HWC Command Injection via Web Interface

ProSoft Technology ICX35-HWC versions 1.3 and prior cellular gateways contain an input validation vulnerability in the web user interface that allows remote attackers to inject and execute system commands by submitting malicious input through unvalidated fields. Attackers can exploit this...

CVE-2017-20235 ProSoft Technology ICX35-HWC Authentication Bypass

ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticated attackers to gain access to administrative functions without valid credentials. Attackers can bypass the authentication mechani...

New Whitepaper: Exploiting Cellular-based IoT Devices

Rapid7 has released a whitepaper titled “The Weaponization of Cellular Based IoT Technology,” by Deral Heiland, principal security researcher, IoT, at Rapid7, and Carlota Bindner, lead product security researcher at Thermo Fisher Scientific. The paper examines how attackers with physical access c...

Huawei HarmonyOS cellular_data module privilege control vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS cellulardata module, which can be exploited by an attacker to compromise availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-9802

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

Permission control vulnerability in the cellulardata module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-28541

CVE-2026-28541 describes a permission control vulnerability in the cellular_data module. The CVSS 3.1 vector indicates LOCAL attack, low complexity, no privileges required, and an availability impact (BASE score 4.0, MEDIUM). The description provides impact on availability but does not include co...

PT-2026-23422

Permission control vulnerability in the cellular data module. Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS cellulardata module, which can be exploited by an attacker to compromise availability...

D-Link DWR-M960 安全漏洞

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formLteSetup, specifically the submit-url parameter. This could lead to a stack buff...

Microhard IPn4G Cellular Gateways Incorrect Authorization (CVE-2018-25146)

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

The vulnerability of the microprogramming software in industrial cellular switches ICG-2510WG-LTE and ICG-2510W-LTE allows a hacker to gain control over the device.

The vulnerability of the microprogrammed software in industrial cellular switches ICG-2510WG-LTE and ICG-2510W-LTE is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to gain control over the device remotely...

Microhard Systems IPn4G 安全漏洞

Microhard Systems IPn4G is a cellular wireless gateway from Microhard Canada. A security vulnerability exists in Microhard Systems IPn4G version 1.1.0, which stems from the presence of hard-coded default credentials that could result in gaining root-level unauthorized access...

Microhard Systems IPn4G 安全漏洞

Microhard Systems IPn4G is a cellular wireless gateway from Microhard Canada. A security vulnerability exists in Microhard Systems IPn4G version 1.1.0 that stems from susceptibility to cross-site request forgery attacks and could lead to the execution of administrative actions...