CVE-2018-25147 - CVE House
Back to Database
Status published Critical CVE-2018-25147

Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

Vulnerability Description

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25147

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • LiquidWorm as Gjoko Krstic of Zero Science Lab

References

More from Microhard Systems

View All →
CVE-2018-25149
Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface
Medium 5.1
CVE-2018-25148
Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface
High 8.7
CVE-2018-25146
Microhard Systems IPn4G 1.1.0 Service Control Denial of Service
High 7.1
CVE-2018-25145
Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated Download
High 7.1
CVE-2018-25144
Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System Editor
High 8.7

Affected Vendor

Microhard Systems

View all reports →

Affected Software

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials
Vulnerable Versions:
IPn4G 1.1.0 build 1098

Timeline

Official Publish: December 24th, 2025
Last Modified: December 24th, 2025
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-1392

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.