Description
Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microhard Systems | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Backdoor Jailbreak | IPn4G 1.1.0 build 1098 | — |
References
- ExploitDB-45041 exploit
- Microhard Systems Product Homepage product
- Zero Science Lab Disclosure (ZSL-2018-5486) third-party-advisory