CVE-2025-57176 – Ceragon Networks/Siklu Communication EtherHaul File Upload Vulnerability

CVE ID : CVE-2025-57176

Published : Sept. 15, 2025, 5:15 p.m. | 1 hour, 39 minutes ago

Description : The rfpiped service on TCP port 555 in Ceragon Networks / Siklu Communication EtherHaul series (8010TX and 1200FX tested) Firmware 7.4.0 through 10.7.3 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…