CVE-2025-57176
MEDIUMCeragon Networks EtherHaul - Unauthenticated File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-57176. PoCs published by semaja2, semaja22.
AI-analyzed exploit summary This exploit leverages an unauthenticated arbitrary file upload vulnerability in Siklu EtherHaul devices by crafting encrypted packets to upload files via a proprietary protocol on port 555. It uses AES-CBC encryption with a hardcoded key and IV to bypass authentication and upload payloads to specified paths.
Description
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
Exploits (2)
This exploit leverages an unauthenticated arbitrary file upload vulnerability in Siklu EtherHaul devices by crafting encrypted packets to upload files via a proprietary protocol on port 555. It uses AES-CBC encryption with a hardcoded key and IV to bypass authentication and upload payloads to specified paths.
This PoC exploits an unauthenticated arbitrary file upload vulnerability in Siklu EtherHaul Series devices by crafting a malicious packet with AES-CBC encryption and sending it to the target device on port 555. The exploit allows an attacker to upload arbitrary files to the device without authentication.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N