CVE-2025-57176 — Ceragon Networks / Siklu Communication / EtherHaul and MultiHaul Series microwave antennas

Description (CNA)

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Affected (CNA)

Vendor / product	Versions
Ceragon Networks / Siklu Communication / EtherHaul and MultiHaul Series microwave antennas	affected Ceragon MultiHaul MH-B100-CCS before R2.4.0; affected Ceragon MultiHaul MH-T200-CCC before R2.4.0; affected Ceragon MultiHaul MH-T200-CNN before R2.4.0; affected Ceragon MultiHaul MH-T201-CNN before R2.4.0; affected Ceragon EtherHaul EH-8010FX before R10.8.1; affected Ceragon EtherHaul EH-500TX before R7.7.12; affected Ceragon EtherHaul EH-600TX before R7.7.12; affected Ceragon EtherHaul EH-614TX before R7.7.12; affected Ceragon EtherHaul EH-700TX before R7.7.12; affected Ceragon EtherHaul EH-710TX before R7.7.12; affected Ceragon EtherHaul EH-1200TX before R7.7.12; affected Ceragon EtherHaul EH-1200FX before R7.7.12; affected Ceragon EtherHaul EH-2200FX before R7.7.12; affected Ceragon EtherHaul EH-2500FX before R7.7.12; affected Ceragon EtherHaul EH-5500FD before R7.7.12

Vendor / product

Versions

Ceragon Networks / Siklu Communication / EtherHaul and MultiHaul Series microwave antennas

affected Ceragon MultiHaul MH-B100-CCS before R2.4.0; affected Ceragon MultiHaul MH-T200-CCC before R2.4.0; affected Ceragon MultiHaul MH-T200-CNN before R2.4.0; affected Ceragon MultiHaul MH-T201-CNN before R2.4.0; affected Ceragon EtherHaul EH-8010FX before R10.8.1; affected Ceragon EtherHaul EH-500TX before R7.7.12; affected Ceragon EtherHaul EH-600TX before R7.7.12; affected Ceragon EtherHaul EH-614TX before R7.7.12; affected Ceragon EtherHaul EH-700TX before R7.7.12; affected Ceragon EtherHaul EH-710TX before R7.7.12; affected Ceragon EtherHaul EH-1200TX before R7.7.12; affected Ceragon EtherHaul EH-1200FX before R7.7.12; affected Ceragon EtherHaul EH-2200FX before R7.7.12; affected Ceragon EtherHaul EH-2500FX before R7.7.12; affected Ceragon EtherHaul EH-5500FD before R7.7.12

CWE

CWE-434

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-04

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.