Microhard IPn4G 1.1.0 gateway has hardcoded default creds for root access
CVE-2018-25147 Published on December 24, 2025
Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
Vulnerability Analysis
CVE-2018-25147 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. An automatable proof of concept (POC) exploit exists. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Products Associated with CVE-2018-25147
Want to know whenever a new CVE is published for Jenkins Credentials? stack.watch will email you.
Affected Versions
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials Version IPn4G 1.1.0 build 1098 is affected by CVE-2018-25147Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.