:: Deepquest ::

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway systems suffer from a system backup configuration file ‘IPn4G.config’ in ‘/’ directory or its respective name based on the model name including the similar files in ‘/www/cgi-bin/system.conf’, ‘/tmp’ and the cli.conf in ‘/etc/m_cli/’ can be downloaded by an authenticated attacker in certain circumstances. This will enable the attacker to disclose sensitive information and help her in authentication bypass, privilege escalation and/or full system access. Many versions are affected.