CVE-2025-57174CRITICAL 9.8EPSS p64.7%

CVE-2025-57174CVE-2025-57174

Description

An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication. This is a failed patch for CVE-2017-7318. This issue may affect other Etherhaul series devices with shared firmware.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS1.22% probability of exploitation · percentile 64.7% · 2026-06-19T12:03:05Z
Published2025-09-15
Last modified2026-04-15

Underlying weaknesses· 1

CWE-321

References

  1. http://ceragon.com
  2. http://etherhaul.com
  3. https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce/

1

TypeTargetConfidenceTier
WeaknessUse of Hard-coded Cryptographic Keycwe-3210%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-57175
CVE
CVE-2025-28202
CVE
CVE-2025-59174
CVE
CVE-2025-67112
CVE
CVE-2025-9146
CVE
CVE-2025-56577
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.