CVE-2018-25145
HIGH
7,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
6,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Description
AI Translation Available
Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0003
Percentile
0,1th
Updated
EPSS Score Trend (Last 83 Days)
552
Files or Directories Accessible to External Parties
DraftCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Potential Impacts:
Read Files Or Directories
Modify Files Or Directories
Applicable Platforms
Technologies:
Not Technology-Specific, Cloud Computing
Operating System
Ipn4Gii Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn4gii_firmware:1.2.0:build1078:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn4Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.6:build1184-14:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Bullet-3G Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:bullet-3g_firmware:1.2.0:reva_build1032:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Bullet-3G Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:bullet-3g_firmware:1.2.0:build1076:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Dragon-Lte Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:dragon-lte_firmware:1.1.0:build1036:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Bullet-Lte Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:bullet-lte_firmware:1.2.0:build1078:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn4Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1090-2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Vip4Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:vip4gb_firmware:1.1.6:build_1204:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Bulletplus Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:bulletplus_firmware:1.3.0:build1036:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn3Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn3gb_firmware:2.2.0:build2160:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn4Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn4gb_firmware:1.1.0:rev2_build1086:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn4G Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn4g_firmware:1.1.0:build1098:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Vip4Gb Wifi-N Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:vip4gb_wifi-n_firmware:1.1.6:rev2_build1196:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Ipn3Gii Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:ipn3gii_firmware:1.2.0:build1076:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Vip4Gb Firmware by Microhardcorp
CPE Identifier
View Detailed Analysis
cpe:2.3:o:microhardcorp:vip4gb_firmware:1.1.6:rev3_build1184-14:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5484.php
https://www.exploit-db.com/exploits/45036
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5484.php
http://www.microhardcorp.com