What is CVE-2025-57175?

CVE-2025-57175 is a medium-severity vulnerability in Ceragon Etherhaul-8010fx, classified under Use of Hard-coded Password. CVSS score: 6.4/10. Published 2026-04-08.

How severe is CVE-2025-57175?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Ceragon Etherhaul-8010fx

CVE-2025-57175

Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.

Published 2026-04-08 · last modified 2026-07-25.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.001 (2.0th percentile), scored 2026-10-02.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 2nd percentile — 2.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000

Affected products

Ceragon Etherhaul-8010fx
Ceragon Etherhaul-8010fx Firmware
Siklu Etherhaul 8010 — versions siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b

Weakness classification (CWE)

CWE-259 — Use of Hard-coded Password

References

semaja2.net/2025/04/30/siklu-eh-firmware-decryption/ (Third Party Advisory)

Frequently asked questions

What is CVE-2025-57175?: CVE-2025-57175 is a medium-severity vulnerability in Ceragon Etherhaul-8010fx, classified under Use of Hard-coded Password. CVSS score: 6.4/10. Published 2026-04-08.
How severe is CVE-2025-57175?: Medium severity. CVSS v3 base score is 6.4 out of 10.