Microhardcorp VIP4GB Firmware vulnerabilities

7 CVEs affecting Microhardcorp VIP4GB Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-25149, published 2025-12-24.

More from Microhardcorp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-25148, published 2025-12-24. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup…
• CVE-2018-25143, published 2025-12-24. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping'…
• CVE-2018-25146, published 2025-12-24. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill…
• CVE-2018-25144, published 2025-12-24. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files.…
• CVE-2018-25145, published 2025-12-24. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve…
• CVE-2018-25147, published 2025-12-24. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized…
• CVE-2018-25149, published 2025-12-24. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages…