4 matches found
EUVD-2025-17398
Malicious code in bioql PyPI...
CVE-2025-35006
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...
CVE-2025-35010
The CVE-2025-35010 entry concerns Microhard BulletLTE-NA2 and IPn4Gii-NA2 gateway devices. A post-authentication command injection flaw in the AT+MNPINGTM command, caused by improper neutralization of argument delimiters (CWE-88), can lead to privilege escalation. Documents confirm affected compo...
CVE-2025-35004
The CVE-2025-35004 entry applies to Microhard BulletLTE-NA2 and IPn4Gii-NA2. It describes a post-authentication command-injection vulnerability in the AT+MFIP command, categorized as CWE-88 (Argument Injection) that can lead to privilege escalation. Underlying cause: improper neutralization of ar...