{"id":"CVE-2025-57176","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-57176","generatedAt":"2026-10-28T03:41:41.622Z","title":"On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device.","description":"On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.","published":"2025-09-15T17:15:35.000Z","lastModified":"2026-06-17T09:42:55.000Z","status":"Deferred","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},"cwe":["CWE-434"],"affected":[],"epss":{"score":0.00406,"percentile":0.34728,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2026-01-17","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":52467,"kind":"exploit","title":"Siklu EtherHaul Series EH-8010 - Arbitrary File Upload","url":"https://www.exploit-db.com/exploits/52467","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/52467.py","file":"exploits/multiple/webapps/52467.py","published":"2026-01-17","added":"2026-01-17","updated":"2026-01-17","author":"semaja2","type":"webapps","platform":"multiple","port":null,"verified":false,"codes":["CVE-2025-57176"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB, so the technical barrier is gone even though the severity is medium and EPSS is 0.4%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-04","source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-57176","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}