Unrated severityNVD Advisory· Published Dec 24, 2025· Updated Jan 26, 2026
Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web Interface
CVE-2018-25149
Description
Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to change admin passwords, add new users, and modify system settings by tricking authenticated users into loading a specially crafted page.
Affected products
2- Range: =1.1.0
- Microhard Systems/Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway CSRF Vulnerabilitiesv5Range: IPn4G 1.1.0 build 1098
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/45034mitreexploit
- www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5478.phpmitrethird-party-advisory
- www.microhardcorp.commitreproduct
News mentions
0No linked articles in our index yet.