PatchTheCVEvip4gb firmware vulnerabilities and fixes
Recent CVEs affecting vip4gb firmware, with upgrade or downgrade steps. 7 tracked.
Also searched as: vip4gbfirmware.
vip4gb firmware has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-24. Highest priority: CVE-2018-25148 (score 50/100).
- CVE-2018-25149 MEDIUM 6.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a cross-site request forgery vulnerability that allows attackers to per
- CVE-2018-25148 HIGH 8.8 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the adm
- CVE-2018-25147 HIGH 7.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gat
- CVE-2018-25146 HIGH 8.1 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to li
- CVE-2018-25145 MEDIUM 6.5 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated
- CVE-2018-25144 HIGH 8.4 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh s
- CVE-2018-25143 HIGH 8.8 MITIGATE MITIGATE Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a res
FAQ
How do I fix vip4gb firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vip4gb firmware being exploited right now?
None of the tracked vip4gb firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vip4gb firmware CVE should I patch first?
CVE-2018-25148 currently ranks highest (50/100): Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the adm.