CVE-2018-25147CWE-1392

Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass

Critical · published December 24, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

🔥 Hardcoded default credentials are still lurking in Microhard Systems IPn4G 1.1.0, turning your device into an open invitation for attackers! Think of it as a hotel room with a master key left in the lock; any thief can simply walk in without even needing to break a sweat. If an attacker knows the default username and password, they can gain root access and control your device without breaking a sweat! This vulnerability is absolutely devastating! With just a quick login, an attacker could seize control of the device, alter settings, and even disrupt network operations. Your entire system could be at risk, allowing unauthorized access to sensitive data.

Put simply

Think of it as a hotel room with a master key left in the lock; any thief can simply walk in without even needing to break a sweat. If an attacker knows the default username and password, they can gain root access and control your device without breaking a sweat! This flaw arises from hardcoded default credentials in Microhard Systems IPn4G 1.1.0 that cannot be changed through normal operations, enabling unauthorized root-level access when exploited by attackers logging in with predefined combinations.

What to do

This vulnerability is absolutely devastating! With just a quick login, an attacker could seize control of the device, alter settings, and even disrupt network operations. Your entire system could be at risk, allowing unauthorized access to sensitive data. To remediate this issue, update your device to the latest version that resolves this flaw, or ensure that any unpatched devices are securely isolated from the network. Always monitor access logs and enforce strong authentication practices on all devices. You've got this! By following these steps, you can protect your network and secure your devices with confidence! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-12-24T19:27Z
EPSS history
Timeline
  • 24 DEC 19:27Z
    Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
    cvelistv5