CVE-2018-25144 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read,…
High CVSS: 8.7

CVE-2018-25144

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that allows authenticated attackers to read, modify, or delete arbitrary files. Attackers can exploit unsanitized 'path', 'savefile', 'edit', and 'delfile' parameters to perform unauthorized file system modifications through GET and POST requests.
Vendor
Microhardcorp
Product
Ipn4g Firmware
CWE
CWE-22
Yayın Tarihi
2025-12-24 20:15:48
Güncelleme
2026-02-02 16:16:12
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-22 Ipn4g Firmware HIGH Microhardcorp 2025

Referanslar

http://www.microhardcorp.com https://www.exploit-db.com/exploits/45037 https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5485.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5485.php