CVE-2025-67013: Etlsystems c0401d1uia-22476 Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.

Affected products

• Etlsystems c0401d1uia-22476 Firmware: version 1.8 only
• Etlsystems c0401d1ula-22419 Firmware: version 1.8 only
• Etlsystems c0401d1ula-22456 Firmware: version 1.8 only
• Etlsystems c0401s1ula-22418 Firmware: version 1.8 only
• Etlsystems c0401s1ula-22455 Firmware: version 1.8 only
• Etlsystems c0801d1ula-22421 Firmware: version 1.8 only
• Etlsystems c0801d1ula-22458 Firmware: version 1.8 only
• Etlsystems c0801s1ula-22420 Firmware: version 1.8 only
• Etlsystems c0801s1ula-22457 Firmware: version 1.8 only
• Etlsystems c1601s1uia-22479 Firmware: version 1.8 only
• Etlsystems c1601s1ula-22422 Firmware: version 1.8 only
• Etlsystems c1601s1ula-22459 Firmware: version 1.8 only
• Etlsystems d0104d1ula-22411 Firmware: version 1.8 only
• Etlsystems d0104d1ula-22451 Firmware: version 1.8 only
• Etlsystems d0104s1ula-22410 Firmware: version 1.8 only
• Etlsystems d0104s1ula-22450 Firmware: version 1.8 only
• Etlsystems d0108d1uia-22473 Firmware: version 1.8 only
• Etlsystems d0108d1ula-22413 Firmware: version 1.8 only
• Etlsystems d0108d1ula-22453 Firmware: version 1.8 only
• Etlsystems d0108s1ula-22412 Firmware: version 1.8 only
• Etlsystems d0108s1ula-22452 Firmware: version 1.8 only
• Etlsystems d0116s1uia-22474 Firmware: version 1.8 only
• Etlsystems d0116s1ula-22414 Firmware: version 1.8 only
• Etlsystems d0116s1ula-22454 Firmware: version 1.8 only
• Etlsystems h0104d1ula-22460 Firmware: version 1.8 only
• and 2 more

Published 2025-12-26. Last modified 2026-06-17.