CVE-2018-25145

None

CVSS

—

EPSS

0.5%

Published

Dec 24, 2025

CISA due date

—

The record

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m_cli/', and '/tmp' to access system passwords and network settings.

Affected packages

Ecosystem	Package	Introduced	Fixed