Unrated severityNVD Advisory· Published Dec 24, 2025· Updated Dec 24, 2025

Microhard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh Service

CVE-2018-25143

Description

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root privileges.

Affected products

Microhard Systems/IPn4Gllm-fuzzy
Range: = 1.1.0
Microhard Systems/Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Backdoor Jailbreakv5
Range: IPn4G 1.1.0 build 1098

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/45041mitreexploit
www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5486.phpmitrethird-party-advisory
www.microhardcorp.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000