CVE-2025-57176 PoC — Ceragon EtherHaul series 安全漏洞

Source

https://github.com/semaja22/CVE-2025-57176

Associated Vulnerability

Title: Ceragon EtherHaul series 安全漏洞 (CVE-2025-57176)
Description:On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Description

CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload

Readme

# CVE-2025-57176
CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
Affected Versions: Firmware 7.4.0 - 10.7.3 (likely all versions since 7.4.0)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →