Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway operations. Attackers can exploit these default credentials to gain unauthorized root-level access to the device by logging in with predefined username and password combinations.
Weakness
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipn4g_firmware | Microhardcorp | 1.1.0-build1098 (including) | 1.1.0-build1098 (including) |