CVE-2018-25148 Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin Interface

High 8.7 Published 24 Dec 2025 Updated 24 Dec 2025

Authenticated attackers can execute arbitrary commands with root privileges via hidden admin features in Microhard Systems IPn4G gateways.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-25148?

CVE-2018-25148 is a high-severity command injection vulnerability in Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit, published on 24 Dec 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interface that allow attackers to create crontab jobs and modify system startup scripts. Attackers can exploit hidden admin features to execute arbitrary commands with root privileges, including starting services, disabling firewalls, and writing files to the system.

Weakness: CWE-266

Which versions are affected by CVE-2018-25148?

It affects 11 products.

Products include Microhardcorp Bullet-3g Firmware, Microhardcorp Bullet-Lte Firmware, Microhardcorp Bulletplus Firmware, Microhardcorp Dragon-Lte Firmware, Microhardcorp Ipn3gb Firmware, Microhardcorp Ipn3gii Firmware and 5 more.

How do I fix CVE-2018-25148?

No fix has been published for CVE-2018-25148 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2018-25148 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-25148 exists.

Sources

Also known as GHSA-jmmc-j836-r5v7.