{"id":"CVE-2018-25146","aliases":["EUVD-2025-205334","GHSA-9wqg-38fc-34m9"],"status":"published","title":"Microhard Systems IPn4G 1.1.0 Service Control Denial of Service","description":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00488,"percentile":0.42246,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2025-12-24T19:27:50Z","modified":"2026-06-17T01:54:49Z","products":[{"vendor":"microhard systems","product":"microhard systems 3g/4g cellular ethernet and serial gateway service control dos"},{"vendor":"microhardcorp","product":"bullet-3g_firmware"},{"vendor":"microhardcorp","product":"bullet-lte_firmware"},{"vendor":"microhardcorp","product":"bulletplus_firmware"},{"vendor":"microhardcorp","product":"dragon-lte_firmware"},{"vendor":"microhardcorp","product":"ipn3gb_firmware"},{"vendor":"microhardcorp","product":"ipn3gii_firmware"},{"vendor":"microhardcorp","product":"ipn4g_firmware"},{"vendor":"microhardcorp","product":"ipn4gb_firmware"},{"vendor":"microhardcorp","product":"ipn4gii_firmware"},{"vendor":"microhardcorp","product":"vip4gb_firmware"},{"vendor":"microhardcorp","product":"vip4gb_wifi-n_firmware"}],"references":[{"url":"https://www.exploit-db.com/exploits/45035","tags":["exploit","Exploit"]},{"url":"http://www.microhardcorp.com","tags":["product","Product"]},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5481.php","tags":["third-party-advisory","exploit","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25146"},{"url":"https://github.com/advisories/GHSA-9wqg-38fc-34m9"}],"sources":{"cve":[{"id":"CVE-2018-25146","title":"Microhard Systems IPn4G 1.1.0 Service Control Denial of Service","description":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.","status":"published","published":"2025-12-24T19:27:50.006Z","modified":"2026-02-02T15:58:16.121Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2025-205334","description":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.","status":"published","published":"2025-12-24T19:27:50Z","modified":"2026-02-02T15:58:16Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:45.464917Z"}],"ghsa":[{"id":"GHSA-9wqg-38fc-34m9","title":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated...","description":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.","status":"published","published":"2025-12-24T21:30:31Z","modified":"2025-12-24T21:30:32Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:05:22.018507Z"}],"nvd":[{"id":"CVE-2018-25146","description":"Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service disruption and requiring device restart.","status":"published","published":"2025-12-24T20:15:49.057Z","modified":"2026-06-17T01:54:49.153Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:05:01.494136Z"}]}}