On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP po
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in R2.4.0, R10.8.1, R7.7.12
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 on Exploit-DB, 1 proof of concept on GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Public exploit on Exploit-DB
EDB-52467
- Record last updated
Affected versions
- Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas
From Ceragon MultiHaul MH-B100-CCS · fixed in R2.4.0; From Ceragon MultiHaul MH-T200-CCC · fixed in R2.4.0; From Ceragon MultiHaul MH-T200-CNN · fixed in R2.4.0; From Ceragon MultiHaul MH-T201-CNN · fixed in R2.4.0; From Ceragon EtherHaul EH-8010FX · fixed in R10.8.1; From Ceragon EtherHaul EH-500TX · fixed in R7.7.12; From Ceragon EtherHaul EH-600TX · fixed in R7.7.12; From Ceragon EtherHaul EH-614TX · fixed in R7.7.12; From Ceragon EtherHaul EH-700TX · fixed in R7.7.12; From Ceragon EtherHaul EH-710TX · fixed in R7.7.12; From Ceragon EtherHaul EH-1200TX · fixed in R7.7.12; From Ceragon EtherHaul EH-1200FX · fixed in R7.7.12; From Ceragon EtherHaul EH-2200FX · fixed in R7.7.12; From Ceragon EtherHaul EH-2500FX · fixed in R7.7.12; From Ceragon EtherHaul EH-5500FD · fixed in R7.7.12