PT-2025-37368 · Siklu Communications · Etherhaul 1200Fx+1

Semaja2 · Published 2025-09-13 · Updated 2026-01-22 · CVE-2025-57174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Siklu Communications Etherhaul 8010TX and 1200FX devices versions 7.4.0 through 10.7.3

Description An issue exists in the rfpiped service, listening on TCP port 555, which utilizes static AES encryption keys hardcoded within the binary. These keys are consistent across all devices, enabling attackers to construct encrypted packets to execute arbitrary commands without authentication. This is a failed patch for a previously known issue. Other Etherhaul series devices with shared firmware may also be affected.

Recommendations Versions prior to 7.4.0 are recommended. Versions 7.4.0 through 10.7.3 are recommended to be updated.

Exploit

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-57174

Affected Products

Etherhaul 1200Fx

Etherhaul 8010Tx

References · 9

• 🔥 https://exploit-db.com/exploits/52466 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57174 · Security Note
• http://etherhaul.com · Note
• https://twitter.com/VulmonFeeds/status/1967791630305419594 · Twitter Post
• http://ceragon.com · Note
• https://twitter.com/redsecuretech/status/2014274369128747073 · Twitter Post
• https://reddit.com/r/wisp/comments/1nfv7nd/siklu_eh_multiple_cves · Reddit Post
• https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce · Note
• https://twitter.com/CVEnew/status/2003567359240425843 · Twitter Post