CVE-2025-57176: Ceragon Networks / Siklu Communication Etherhaul And Multihaul Series Microwave Antennas

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.

Affected products

• Ceragon Networks / Siklu Communication Etherhaul And Multihaul Series Microwave Antennas

Published 2025-09-15. Last modified 2026-06-17.