Unrestricted file upload in Ceragon Networks / Siklu Communication EtherHaul and…
Priority LOW 29CWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.
Summary
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00406 35th percentileScored 2026-11-07
Fix Fixed EtherHaul and MultiHaul Series microwave antennas (Ceragon Networks / Siklu Communication): R2.4.0, R10.8.1, R7.7.12
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Ceragon Networks / Siklu Communication | EtherHaul and MultiHaul Series microwave antennas | Ceragon MultiHaul MH-B100-CCS to before R2.4.0; Ceragon MultiHaul MH-T200-CCC to before R2.4.0; Ceragon MultiHaul MH-T200-CNN to before R2.4.0; Ceragon MultiHaul MH-T201-CNN to before R2.4.0; Ceragon EtherHaul EH-8010FX to before R10.8.1; Ceragon EtherHaul EH-500TX to before R7.7.12; Ceragon EtherHaul EH-600TX to before R7.7.12; Ceragon EtherHaul EH-614TX to before R7.7.12; Ceragon EtherHaul EH-700TX to before R7.7.12; Ceragon EtherHaul EH-710TX to before R7.7.12; Ceragon EtherHaul EH-1200TX to before R7.7.12; Ceragon EtherHaul EH-1200FX to before R7.7.12; Ceragon EtherHaul EH-2200FX to before R7.7.12; Ceragon EtherHaul EH-2500FX to before R7.7.12; Ceragon EtherHaul EH-5500FD to before R7.7.12 | R2.4.0, R10.8.1, R7.7.12 | Patch available | CNA |
- EtherHaul and MultiHaul Series microwave antennas VendorCeragon Networks / Siklu Communication Affected Ceragon MultiHaul MH-B100-CCS to before R2.4.0; Ceragon MultiHaul MH-T200-CCC to before R2.4.0; Ceragon MultiHaul MH-T200-CNN to before R2.4.0; Ceragon MultiHaul MH-T201-CNN to before R2.4.0; Ceragon EtherHaul EH-8010FX to before R10.8.1; Ceragon EtherHaul EH-500TX to before R7.7.12; Ceragon EtherHaul EH-600TX to before R7.7.12; Ceragon EtherHaul EH-614TX to before R7.7.12; Ceragon EtherHaul EH-700TX to before R7.7.12; Ceragon EtherHaul EH-710TX to before R7.7.12; Ceragon EtherHaul EH-1200TX to before R7.7.12; Ceragon EtherHaul EH-1200FX to before R7.7.12; Ceragon EtherHaul EH-2200FX to before R7.7.12; Ceragon EtherHaul EH-2500FX to before R7.7.12; Ceragon EtherHaul EH-5500FD to before R7.7.12 Fixed in R2.4.0, R10.8.1, R7.7.12 Patch available CNA
Remediation
- Fix · CNA EtherHaul and MultiHaul Series microwave antennas (Ceragon Networks / Siklu Communication) Fixed in R2.4.0, R10.8.1, R7.7.12
Timeline
- 2026-10-02 Threatist record created from CVE-2025-57176
- 2026-10-03 Alias added: GHSA-27hm-23w4-7mrj
References
Sources
- CVE-2025-57176 · CVE Program
- CVE-2025-57176 · NVD
- FIRST EPSS
- GHSA-27hm-23w4-7mrj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences