PT-2025-37370 · Ceragon Networks · Etherhaul+1

Published 2025-09-13 · Updated 2026-04-15 · CVE-2025-57176

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ceragon Networks / Siklu Communication EtherHaul series versions 7.4.0 through 10.7.3

Description The rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Recommendations Update to a version later than 10.7.3.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-57176

Affected Products

Etherhaul

Siklu Communication Etherhaul

References · 11

• 🔥 https://exploit-db.com/exploits/52467 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57176 · Security Note
• https://twitter.com/CVEnew/status/2003567360297369609 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-069-04 · Note
• https://t.me/cveNotify/155034 · Telegram Post
• http://etherhaul.com · Note
• https://t.me/cveNotify/135540 · Telegram Post
• http://ceragon.com · Note
• https://reddit.com/r/wisp/comments/1nfv7nd/siklu_eh_multiple_cves · Reddit Post
• https://twitter.com/VulmonFeeds/status/1967794190277923299 · Twitter Post
• https://twitter.com/SecurityAr58409/status/2044233462316425446 · Twitter Post