CVE-2018-25143 | THREATINT

Description

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SSH shell with a default 'msshc' user. Attackers can exploit a custom 'ping' command in the NcFTP environment to escape the restricted shell and execute commands with root privileges.

PUBLISHED Reserved 2025-12-24 | Published 2025-12-24 | Updated 2025-12-24 | Assigner VulnCheck

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

IPn4G 1.1.0 build 1098

affected

Credits

LiquidWorm as Gjoko Krstic of Zero Science Lab finder

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5486.php exploit

www.exploit-db.com/exploits/45041 (ExploitDB-45041) exploit

www.microhardcorp.com (Microhard Systems Product Homepage) product

www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5486.php (Zero Science Lab Disclosure (ZSL-2018-5486)) third-party-advisory

cve.org (CVE-2018-25143)

nvd.nist.gov (CVE-2018-25143)

Download JSON