Siklu vulnerabilities
Published CVEs affecting Siklu products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-57175
Medium · 6.8
CWE-259 Apr 8, 2026
Use of Hard-coded Password in Ceragon Etherhaul-8010fx Firmware
Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.
CVE-2024-58300
High · 8.7
CWE-306 Dec 11, 2025
Siklu MultiHaul TG Series < 2.0.0 Unauthenticated Credential Disclosure Vulnerability
Siklu MultiHaul TG series devices before version 2.0.0 contain an unauthenticated vulnerability that allows remote attackers to retrieve randomly generated credentials via a network request. Attackers can send a specific hex-encoded command to port 12777 to obtain username and password, enabling direct SSH access to the device.