PT-2025-53594 · Etl Systems · Dextra Series Digital L-Band Distribution System

Hiky8 · Published 2025-12-26 · Updated 2025-12-26 · CVE-2025-67013

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ETL Systems Ltd DEXTRA Series Digital L-Band Distribution System version 1.8

Description The web management interface lacks Cross-Site Request Forgery (CSRF) protection mechanisms, specifically missing tokens and Origin/Referer validation, on critical configuration endpoints. This could allow an attacker to perform unauthorized actions on behalf of an authenticated user.

Recommendations Apply updates to address the missing CSRF protection mechanisms on critical configuration endpoints in version 1.8.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-67013

Affected Products

Dextra Series Digital L-Band Distribution System

References · 7

• 🔥 https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67013%20_%20ETL%20Systems%20Ltd%20DEXTRA%20Series%20_%20CSRF · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-67013 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67013 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2004599487482700199 · Twitter Post
• https://etlsystems.com · Note
• https://twitter.com/CVEnew/status/2004666614596165886 · Twitter Post
• https://t.me/CVEtracker/40722 · Telegram Post