CVE-2018-25148 is a critical authenticated remote code execution vulnerability affecting Microhard Systems IPn4G 1.1.0 devices. Attackers with administrative credentials can exploit hidden features in the admin interface to create crontab jobs and modify system startup scripts, leading to arbitrary command execution with root privileges. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a severe risk with low attack complexity and high impact on confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or community discussions are currently identified, the high FAUCET Risk Score of 90/100 underscores its potential danger.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.1.0CPE matchmatch criteria | cpe:2.3:o:microhardcorp:ipn4g_firmware:1.1.0:build1098:*:*:*:*:*:* | ||
2.2.0CPE matchmatch criteria | cpe:2.3:o:microhardcorp:ipn3gb_firmware:2.2.0:build2160:*:*:*:*:*:* | ||
1.1.6CPE matchmatch criteria | cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.6:build1184-14:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1090-2:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1086:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.