CVE-2025-35004: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MMNAME command, which could lead to...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2, which stems from the presence of post-authentication command injection for the AT+MFIP command, which cou...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 参数注入漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A parameter injection vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2, which stems from the presence of post-authentication command injection on the AT+MNNETSP...

Microhard Bullet-LTE和Microhard IPn4Gii-NA2 安全漏洞

The Microhard Bullet-LTE and Microhard IPn4Gii-NA2 are both products of Microhard Canada.The Microhard Bullet-LTE is an industrial serial gateway. It utilizes a 4G / HSPA + / LTE network infrastructure to provide a compact, rugged, and powerful industrial-strength wireless solution Microhard...

CVE-2025-35010: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35009: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MFRULE command, which could result in...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MFMAC command, which could lead to...

CVE-2025-35008: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-35005: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argumen...

PT-2025-24378 · Microhard · Ipn4Gii-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard products that incorporate the BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is related to a post-authentication command injection problem in the AT+MFPORTFWD command, which can lead to privileg...

PT-2025-24382 · Microhard · Microhard Bulletlte-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is related to a post-authentication command injection in the AT+MNPINGTM command, which can lead to privilege escalation. This is an instance of...

PT-2025-24379 · Microhard · Ipn4Gii-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard products that incorporate the BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is related to a post-authentication command injection problem in the AT+MFRULE command, which can lead to privilege...

PT-2025-24381 · Microhard · Microhard Bulletlte-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is a post-authentication command injection problem in the AT+MNNETSP command, which can lead to privilege escalation. This is an instance of improp...

PT-2025-24377 · Microhard · Microhard Bulletlte-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is related to a post-authentication command injection problem in the AT+MFMAC command, which can lead to privilege escalation. This is an instance ...

PT-2025-24380 · Microhard · Ipn4Gii-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard products that incorporate the BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is related to a post-authentication command injection problem in the AT+MMNAME command, which can lead to privilege...

PT-2025-24376 · Microhard · Microhard Bulletlte-Na2 +1

Name of the Vulnerable Software and Affected Versions: Microhard BulletLTE-NA2 and IPn4Gii-NA2 affected versions not specified Description: The issue is a post-authentication command injection problem in the AT+MFIP command, which can lead to privilege escalation. This is an instance of improper...

Microhard 3G/4G Cellular Ethernet and Serial Gateway Use of Default Credentials (ZSL-2018-5480)

The devices utilizes hard-coded credentials within its Linux distribution image. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the gateway. Another vulnerability could allow an authenticated attacker to gain root access. The...

Microhard Bullet-LTE Improper Neutralization of Special Elements used in an OS Command (CVE-2020-17406)

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ping parameter provided to tools.sh. The issu...