CVE-2018-25144

moderate-risk
Published 2025-12-24

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform unauthorized file system modifications through GET and POST requests.

Do I need to act?

-
0.26% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.4/10 High
LOCAL / LOW complexity

Affected Products (15)

Ipn4G Firmware
Ipn3Gb Firmware
Ipn4Gb Firmware
Ipn4Gb Firmware
Ipn4Gb Firmware
Bullet-3G Firmware
Vip4Gb Firmware
Vip4Gb Firmware
Vip4Gb Wifi-N Firmware
Bullet-3G Firmware
Ipn3Gii Firmware
Ipn4Gii Firmware
Bulletplus Firmware
Dragon-Lte Firmware

Affected Vendors

Microhardcorp

References (4)

Product http://www.microhardcorp.com
Exploit https://www.exploit-db.com/exploits/45037
Exploit https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5485.php
Exploit https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5485.php
45
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 18/34 · Moderate