CVE-2018-25146

Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.

Affected

Microhard Systems · Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Service Control DoS

CVSS v4.0 VULNCHECK

7.1 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2025-12-24

Updated

2026-02-02

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/45035

Security advisories

• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5481.php
• http://www.microhardcorp.com

References

• CVE Record
• NVD entry