CVE-2025-57174
Last modified
CVE-2025-57174 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. EPSS estimates a 1.22% chance of exploitation in the next 30 days.
Description
An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication. This is a failed patch for CVE-2017-7318. This issue may affect other Etherhaul series devices with shared firmware.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-57174?
How severe is CVE-2025-57174?
How do I fix CVE-2025-57174?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-57151phpgurukul Complaint Management System 2.0 is vulnerable to …8.8
- CVE-2025-57155NULL pointer dereference in the daap_reply_groups function i…7.5
- CVE-2025-57156NULL pointer dereference in the dacp_reply_playqueueedit_cle…7.5
- CVE-2025-5716A vulnerability classified as critical has been found in Sou…7.3
- CVE-2025-57164Flowise through v3.0.4 is vulnerable to remote code executio…6.5
- CVE-2025-5717An authenticated remote code execution (RCE) vulnerability e…7.2
- CVE-2025-57175Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552…6.8
- CVE-2025-57176On Ceragon Networks / Siklu Communication EtherHaul and Mult…6.5
- CVE-2025-5718The ACAP Application framework could allow privilege escalat…6.8
- CVE-2025-5719The wallet has an authentication bypass vulnerability that a…5.1
- CVE-2025-57197In the Payeer Android application 2.5.0, an improper access …6
- CVE-2025-57198AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1…8.8
Are you affected by CVE-2025-57174?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST