Vulnerability · Published Jun 8, 2025 · Assigned by AHA

CVE-2025-35010Microhard Bullet-LTE and IPn4Gii AT+MNPINGTM Argument Injection

High 7.1

In plain English

A high-severity argument injection in IPn4Gii / Bullet-LTE Firmware from Microhard. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 64% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)1.1%top 35.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.

Affected products (as reported)

Vendor	Product	Versions
Microhard	IPn4Gii / Bullet-LTE Firmware	0 – through v1.2.0-r1132

Weakness: CWE-88 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

https://takeonme.org/cves/cve-2025-35010/ third-party-advisory
https://www.microhardcorp.com/BulletLTE-NA2.php product
https://www.microhardcorp.com/IPn4Gii-NA2.php product
https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware product