https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-35010.htmlhttps://patchthecve.com/cve/CVE-2025-35010.htmlWed, 17 Jun 2026 09:14:13 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumehttps://patchthecve.com/cve/CVE-2025-35009.htmlhttps://patchthecve.com/cve/CVE-2025-35009.htmlWed, 17 Jun 2026 09:14:13 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumenhttps://patchthecve.com/cve/CVE-2025-35008.htmlhttps://patchthecve.com/cve/CVE-2025-35008.htmlWed, 17 Jun 2026 09:14:13 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumenthttps://patchthecve.com/cve/CVE-2025-35007.htmlhttps://patchthecve.com/cve/CVE-2025-35007.htmlWed, 17 Jun 2026 09:14:13 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumenthttps://patchthecve.com/cve/CVE-2025-35006.htmlhttps://patchthecve.com/cve/CVE-2025-35006.htmlWed, 17 Jun 2026 09:14:12 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumhttps://patchthecve.com/cve/CVE-2025-35005.htmlhttps://patchthecve.com/cve/CVE-2025-35005.htmlWed, 17 Jun 2026 09:14:12 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument https://patchthecve.com/cve/CVE-2025-35004.htmlhttps://patchthecve.com/cve/CVE-2025-35004.htmlWed, 17 Jun 2026 09:14:12 +0000HIGH 7.1: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument I