CVE-2018-25147
Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
| CWE | CWE-1392 |
| Vendor | microhard systems |
| Product | microhard systems 3g/4g cellular ethernet and serial gateway default credentials |
| Published | Dec 24, 2025 |
| Last Updated | Jul 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for microhard systems microhard systems 3g/4g cellular ethernet and serial gateway default credentials
Be the first to know when new high vulnerabilities affecting microhard systems microhard systems 3g/4g cellular ethernet and serial gateway default credentials are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Microhard Systems / Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials
IPn4G 1.1.0 build 1098
References
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab