Description
Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microhard Systems | Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials | IPn4G 1.1.0 build 1098 | — |
References
- ExploitDB-45040 exploit
- Microhard Systems Product Homepage product
- Zero Science Lab Disclosure (ZSL-2018-5480) third-party-advisory