Description
Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microhard Systems | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Configuration Download | IPn4G 1.1.0 build 1098 | — |
References
- ExploitDB-45036 exploit
- Microhard Systems Product Web Page product
- Zero Science Lab Disclosure (ZSL-2018-5484) third-party-advisory