The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band…
Priority HIGH 68CWE-352Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Tampering
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-352.
Summary
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00168 6th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 54
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:etlsystems:d0116s1ula-22454_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0116s1ula-22454:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0116s1uia-22474_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0116s1uia-22474:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0401s1ula-22418_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0401s1ula-22418:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0801s1ula-22420_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0801s1ula-22420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c1601s1ula-22422_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c1601s1ula-22422:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
- cpe:2.3:o:etlsystems:d0116s1ula-22454_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0116s1ula-22454:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0116s1uia-22474_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0116s1uia-22474:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0401s1ula-22418_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0401s1ula-22418:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0801s1ula-22420_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0801s1ula-22420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c1601s1ula-22422_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c1601s1ula-22422:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
Show 44 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:etlsystems:c0401s1ula-22455_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0401s1ula-22455:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0801s1ula-22457_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0801s1ula-22457:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c1601s1ula-22459_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c1601s1ula-22459:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c1601s1uia-22479_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c1601s1uia-22479:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0104d1ula-22411_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0104d1ula-22411:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0108d1ula-22413_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0108d1ula-22413:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0104d1ula-22451_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0104d1ula-22451:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0108d1ula-22453_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0108d1ula-22453:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0108d1uia-22473_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0108d1uia-22473:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0401d1ula-22419_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0401d1ula-22419:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0801d1ula-22421_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0801d1ula-22421:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0401d1ula-22456_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0401d1ula-22456:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0801d1ula-22458_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0801d1ula-22458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:c0401d1uia-22476_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:c0401d1uia-22476:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:h0108d1ula-22431_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:h0108d1ula-22431:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:h0104d1ula-22460_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:h0104d1ula-22460:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:h0108d1ula-22461_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:h0108d1ula-22461:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0104s1ula-22410_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0104s1ula-22410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0108s1ula-22412_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0108s1ula-22412:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0116s1ula-22414_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0116s1ula-22414:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0104s1ula-22450_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0104s1ula-22450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
| cpe:2.3:o:etlsystems:d0108s1ula-22452_firmware:1.8:*:*:*:*:*:*:* | 1.8 | Vulnerable | Etlsystems |
| cpe:2.3:h:etlsystems:d0108s1ula-22452:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Etlsystems |
- cpe:2.3:o:etlsystems:c0401s1ula-22455_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0401s1ula-22455:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0801s1ula-22457_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0801s1ula-22457:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c1601s1ula-22459_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c1601s1ula-22459:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c1601s1uia-22479_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c1601s1uia-22479:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0104d1ula-22411_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0104d1ula-22411:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0108d1ula-22413_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0108d1ula-22413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0104d1ula-22451_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0104d1ula-22451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0108d1ula-22453_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0108d1ula-22453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0108d1uia-22473_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0108d1uia-22473:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0401d1ula-22419_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0401d1ula-22419:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0801d1ula-22421_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0801d1ula-22421:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0401d1ula-22456_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0401d1ula-22456:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0801d1ula-22458_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0801d1ula-22458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:c0401d1uia-22476_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:c0401d1uia-22476:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:h0108d1ula-22431_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:h0108d1ula-22431:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:h0104d1ula-22460_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:h0104d1ula-22460:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:h0108d1ula-22461_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:h0108d1ula-22461:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0104s1ula-22410_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0104s1ula-22410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0108s1ula-22412_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0108s1ula-22412:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0116s1ula-22414_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0116s1ula-22414:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0104s1ula-22450_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0104s1ula-22450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
- cpe:2.3:o:etlsystems:d0108s1ula-22452_firmware:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·Etlsystems
- cpe:2.3:h:etlsystems:d0108s1ula-22452:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Etlsystems
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-67013
- 2026-10-03 Alias added: GHSA-4jf5-rmwc-7vww
References
Sources
- CVE-2025-67013 · CVE Program
- CVE-2025-67013 · NVD
- FIRST EPSS
- GHSA-4jf5-rmwc-7vww · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences