CVE-2025-35004: falha de alta gravidade em Microhard IPn4Gii / Bullet-LTE Firmware
Microhard Bullet-LTE and IPn4Gii AT+MFIP Argument Injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 1.1%
Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Microhard · IPn4Gii / Bullet-LTE FirmwareCVEs relacionadas — Microhard IPn4Gii / Bullet-LTE Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2025-35010HIGHMicrohard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument InjectionEPSS 1.1%CVE-2025-35009HIGHMicrohard Bullet-LTE and IPn4Gii AT+MNNETSP Argument InjectionEPSS 1.1%CVE-2025-35008HIGHMicrohard Bullet-LTE and IPn4Gii AT+MMNAME Argument InjectionEPSS 1.1%CVE-2025-35007HIGHMicrohard Bullet-LTE and IPn4Gii AT+MFRULE Argument InjectionEPSS 1.1%CVE-2025-35006HIGHMicrohard Bullet-LTE and IPn4Gii AT+MFPORTFWD Argument InjectionEPSS 1.1%CVE-2025-35005HIGHMicrohard Bullet-LTE and IPn4Gii AT+MFMAC Argument InjectionEPSS 1.1%