PatchTheCVEbullet-3g firmware vulnerabilities and fixes
Recent CVEs affecting bullet-3g firmware, with upgrade or downgrade steps. 7 tracked.
Also searched as: bullet 3g firmware, bullet-3gfirmware.
bullet-3g firmware has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-24. Highest priority: CVE-2018-25148 (score 50/100).
- CVE-2018-25149 MEDIUM 6.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to per
- CVE-2018-25148 HIGH 8.8 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the adm
- CVE-2018-25147 HIGH 7.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gat
- CVE-2018-25146 HIGH 8.1 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to li
- CVE-2018-25145 MEDIUM 6.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated
- CVE-2018-25144 HIGH 8.4 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh s
- CVE-2018-25143 HIGH 8.8 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a res
FAQ
How do I fix bullet-3g firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bullet-3g firmware being exploited right now?
None of the tracked bullet-3g firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bullet-3g firmware CVE should I patch first?
CVE-2018-25148 currently ranks highest (50/100): Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the adm.