CVE-2018-25144

published 2025-12-24

CVE-2018-25144: Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform unauthorized file system modifications through GET and POST requests.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
microhard_systems	microhard_systems_3g_4g_cellular_ethernet_and_serial_gateway_arbitrary_file_atta	—	—
microhardcorp	bullet-3g_firmware	—	—
microhardcorp	bullet-lte_firmware	—	—
microhardcorp	bulletplus_firmware	—	—
microhardcorp	dragon-lte_firmware	—	—
microhardcorp	ipn3gb_firmware	—	—
microhardcorp	ipn3gii_firmware	—	—
microhardcorp	ipn4g_firmware	—	—
microhardcorp	ipn4gb_firmware	—	—
microhardcorp	ipn4gb_firmware	—	—
microhardcorp	ipn4gii_firmware	—	—
microhardcorp	vip4gb_firmware	—	—
microhardcorp	vip4gb_wifi-n_firmware	—	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22