CVE-2018-25146: Microhardcorp Bullet-3g Firmware

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.

Affected products

• Microhardcorp Bullet-3g Firmware: version 1.2.0 only
• Microhardcorp Bullet-Lte Firmware: version 1.2.0 only
• Microhardcorp Bulletplus Firmware: version 1.3.0 only
• Microhardcorp Dragon-Lte Firmware: version 1.1.0 only
• Microhardcorp IPN3GB Firmware: version 2.2.0 only
• Microhardcorp IPN3GII Firmware: version 1.2.0 only
• Microhardcorp IPN4G Firmware: version 1.1.0 only
• Microhardcorp IPN4GB Firmware: version 1.1.6 only; version 1.1.0 only
• Microhardcorp IPN4GII Firmware: version 1.2.0 only
• Microhardcorp VIP4GB Firmware: version 1.1.6 only
• Microhardcorp VIP4GB Wifi-N Firmware: version 1.1.6 only

Published 2025-12-24. Last modified 2026-06-17.