CVE-2025-13510

Iskra iHUB and iHUB Lite has a Missing Authentication for Critical Function vulnerabilitiy PUBLISHED

Description (CNA)

The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.

Affected (CNA)

Vendor / product	Versions
Iskra / iHUB and iHUB Lite	affected All versions

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.