VULNERABILITY INTELLIGENCE

CVE-2018-25145

CVSS score7.1 HIGH

EPSS probability0.47%

CISA KEVNot currently listed

Published2025-12-24

Last modified2026-06-17

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.

Weakness classification

CWE-552: Files or Directories Accessible to External Parties

Primary references

disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Exploit
disclosure@vulncheck.com — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory