CVE-2025-57176
Medium
Description
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
SeverityMedium
CVSS6.5
Exploit probability—
ProductEtherHaul and MultiHaul Series microwave antennas
PublishedSep 15, 2025
First seenSep 15, 2025
Weakness typeCWE-434Unrestricted upload of dangerous file type
How to fix
Update
- Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennasR2.4.0, R10.8.1, R7.7.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas | Ceragon MultiHaul MH-B100-CCS ≤ v < R2.4.0, Ceragon MultiHaul MH-T200-CCC ≤ v < R2.4.0, Ceragon MultiHaul MH-T200-CNN ≤ v < R2.4.0, Ceragon MultiHaul MH-T201-CNN ≤ v < R2.4.0, Ceragon EtherHaul EH-8010FX ≤ v < R10.8.1, Ceragon EtherHaul EH-500TX ≤ v < R7.7.12, Ceragon EtherHaul EH-600TX ≤ v < R7.7.12, Ceragon EtherHaul EH-614TX ≤ v < R7.7.12, Ceragon EtherHaul EH-700TX ≤ v < R7.7.12, Ceragon EtherHaul EH-710TX ≤ v < R7.7.12, Ceragon EtherHaul EH-1200TX ≤ v < R7.7.12, Ceragon EtherHaul EH-1200FX ≤ v < R7.7.12, Ceragon EtherHaul EH-2200FX ≤ v < R7.7.12, Ceragon EtherHaul EH-2500FX ≤ v < R7.7.12, Ceragon EtherHaul EH-5500FD ≤ v < R7.7.12 | R2.4.0, R10.8.1, R7.7.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.