CVE-2018-25146
Microhard Systems IPn4G 1.1.0 Service Control Denial of Service
- State
- Published
- Severity
- 7.1 High
- Published
- Dec 24, 2025
- Updated
- Feb 2, 2026
- Reserved
- Dec 24, 2025
Description
Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H | VulnCheck |
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Service Control DoSMicrohard Systems |
|
References
- ExploitDB-45035exploit
- Microhard Systems Product Web Pageproduct
- Zero Science Lab Disclosure (ZSL-2018-5481)third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.