CVE-2018-25143 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Att…
High CVSS: 8.7

CVE-2018-25143

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root privileges.
Vendor
Microhardcorp
Product
Ipn4g Firmware
CWE
CWE-78
Yayın Tarihi
2025-12-24 20:15:48
Güncelleme
2026-01-26 19:52:01
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-78 Ipn4g Firmware HIGH Microhardcorp 2025

Referanslar

http://www.microhardcorp.com https://www.exploit-db.com/exploits/45041 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5486.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5486.php