Vendors / Siklu Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Siklu records in CISA KEV No Siklu vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Siklu MultiHaul TG series devices through version 2.0.0 contain an unauthenticated vulnerability that allows remote attackers to retrieve randomly generated credentials via a network request.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-12-11 · No fix listed CWE-306
Priority HIGH 72
Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0055 · Published 2024-03-18 · No fix listed CWE-284
Priority MEDIUM 49
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0425 · Published 2017-03-30 · No fix listed
Priority MEDIUM 47
Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0296 · Published 2017-03-30 · No fix listed CWE-798
Priority LOW 31
Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.
CVSS 3.1 MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00132 · Published 2026-04-08 · No fix listed CWE-259
Open these records in search → All records by CVSS severity
2 2 1 0 0
THREATIST.IORead the docs