Microhard Systems 3G/4G Cellular Ethernet And Serial Gateway Configuration Download
Posted by deepcore on July 17, 2018 – 11:35 pm
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway systems suffer from a system backup configuration file ‘IPn4G.config’ in ‘/’ directory or its respective name based on the model name including the similar files in ‘/www/cgi-bin/system.conf’, ‘/tmp’ and the cli.conf in ‘/etc/m_cli/’ can be downloaded by an authenticated attacker in certain circumstances. This will enable the attacker to disclose sensitive information and help her in authentication bypass, privilege escalation and/or full system access. Many versions are affected.
Post a reply
You must be logged in to post a comment.