CVE-2025-35009 Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35009

Affected products: Microhard BulletLTE-NA2 and IPn4Gii-NA2. Issue: post-authentication command injection in the AT+MNNETSP command leading to privilege escalation. Root cause: CWE-88 (Improper Neutralization of Argument Delimiters in a Command). CVSSv3.1 base score 7.1 (Low/Local access, Low priv...

CVE-2025-35009 Microhard Bullet-LTE and IPn4Gii AT+MNNETSP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35008 Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-35008

The CVE-2025-35008 entry concerns Microhard BulletLTE-NA2 and IPn4Gii-NA2 devices affected by a post-authentication command injection in the AT+MMNAME command (CWE-88). Affected component: AT command handling in these gateways; root cause: improper neutralization of argument delimiters leading to...

CVE-2025-35008 Microhard Bullet-LTE and IPn4Gii AT+MMNAME Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-35007 Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-35007 Microhard Bullet-LTE and IPn4Gii AT+MFRULE Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...

CVE-2025-35007

CVE-2025-35007 affects Microhard BulletLTE-NA2 and IPn4Gii-NA2. Reported vulnerability is a post-authentication command injection in the AT+MFRULE command, falling under CWE-88 (Argument Injection) and enabling privilege escalation. CVSS v3.1 base score 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N); ...

CVE-2025-35006 Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35006 Microhard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

CVE-2025-35006

CVE-2025-35006 affects Microhard BulletLTE-NA2 and IPn4Gii-NA2. The issue is a post-authentication command injection in the AT+MFPORTFWD command, enabling privilege escalation. The root cause is CWE-88 (Improper Neutralization of Argument Delimiters in a Command). The CVSSv3.1 score is 7.1 (AV:L/...

CVE-2025-35005 Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argumen...

CVE-2025-35005

CVE-2025-35005 affects Microhard BulletLTE-NA2 and IPn4Gii-NA2. The issue is a post-authentication command injection in the AT+MFMAC command due to improper neutralization of argument delimiters, enabling privilege escalation. The vulnerability is classified as CWE-88 with CVSS v3.1 base score 7....

CVE-2025-35005 Microhard Bullet-LTE and IPn4Gii AT+MFMAC Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argumen...

CVE-2025-35004 Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument...

CVE-2025-35004

The CVE-2025-35004 entry applies to Microhard BulletLTE-NA2 and IPn4Gii-NA2. It describes a post-authentication command-injection vulnerability in the AT+MFIP command, categorized as CWE-88 (Argument Injection) that can lead to privilege escalation. Underlying cause: improper neutralization of ar...

CVE-2025-35004 Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument...

Microhard BulletLTE‑NA2和Microhard IPn4Gii-NA2 安全漏洞

The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A security vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 that stems from a post-authentication command injection of the AT+MMNAME command, which could lead to...

CVE-2025-35007: Improper Neutralization of Argument Delimiters in a Command

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argume...