Vulnerability · Published Sep 15, 2025 · Assigned by mitre
CVE-2025-57176
Medium 6.5
In plain English
A medium-severity unrestricted file upload in EtherHaul and MultiHaul Series microwave antennas from Ceragon Networks / Siklu Communication. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ceragon Networks / Siklu Communication | EtherHaul and MultiHaul Series microwave antennas | Ceragon MultiHaul MH-B100-CCS – before R2.4.0Ceragon MultiHaul MH-T200-CCC – before R2.4.0Ceragon MultiHaul MH-T200-CNN – before R2.4.0Ceragon MultiHaul MH-T201-CNN – before R2.4.0Ceragon EtherHaul EH-8010FX – before R10.8.1Ceragon EtherHaul EH-500TX – before R7.7.12Ceragon EtherHaul EH-600TX – before R7.7.12Ceragon EtherHaul EH-614TX – before R7.7.12 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N