6.5

CVE-2025-67013

Exploit
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Etlsystems ≫ D0116s1ula-22454 Firmware Version 1.8
   Etlsystems ≫ D0116s1ula-22454 Version -
Etlsystems ≫ D0116s1uia-22474 Firmware Version 1.8
   Etlsystems ≫ D0116s1uia-22474 Version -
Etlsystems ≫ C0401s1ula-22418 Firmware Version 1.8
   Etlsystems ≫ C0401s1ula-22418 Version -
Etlsystems ≫ C0801s1ula-22420 Firmware Version 1.8
   Etlsystems ≫ C0801s1ula-22420 Version -
Etlsystems ≫ C1601s1ula-22422 Firmware Version 1.8
   Etlsystems ≫ C1601s1ula-22422 Version -
Etlsystems ≫ C0401s1ula-22455 Firmware Version 1.8
   Etlsystems ≫ C0401s1ula-22455 Version -
Etlsystems ≫ C0801s1ula-22457 Firmware Version 1.8
   Etlsystems ≫ C0801s1ula-22457 Version -
Etlsystems ≫ C1601s1ula-22459 Firmware Version 1.8
   Etlsystems ≫ C1601s1ula-22459 Version -
Etlsystems ≫ C1601s1uia-22479 Firmware Version 1.8
   Etlsystems ≫ C1601s1uia-22479 Version -
Etlsystems ≫ D0104d1ula-22411 Firmware Version 1.8
   Etlsystems ≫ D0104d1ula-22411 Version -
Etlsystems ≫ D0108d1ula-22413 Firmware Version 1.8
   Etlsystems ≫ D0108d1ula-22413 Version -
Etlsystems ≫ D0104d1ula-22451 Firmware Version 1.8
   Etlsystems ≫ D0104d1ula-22451 Version -
Etlsystems ≫ D0108d1ula-22453 Firmware Version 1.8
   Etlsystems ≫ D0108d1ula-22453 Version -
Etlsystems ≫ D0108d1uia-22473 Firmware Version 1.8
   Etlsystems ≫ D0108d1uia-22473 Version -
Etlsystems ≫ C0401d1ula-22419 Firmware Version 1.8
   Etlsystems ≫ C0401d1ula-22419 Version -
Etlsystems ≫ C0801d1ula-22421 Firmware Version 1.8
   Etlsystems ≫ C0801d1ula-22421 Version -
Etlsystems ≫ C0401d1ula-22456 Firmware Version 1.8
   Etlsystems ≫ C0401d1ula-22456 Version -
Etlsystems ≫ C0801d1ula-22458 Firmware Version 1.8
   Etlsystems ≫ C0801d1ula-22458 Version -
Etlsystems ≫ C0401d1uia-22476 Firmware Version 1.8
   Etlsystems ≫ C0401d1uia-22476 Version -
Etlsystems ≫ H0108d1ula-22431 Firmware Version 1.8
   Etlsystems ≫ H0108d1ula-22431 Version -
Etlsystems ≫ H0104d1ula-22460 Firmware Version 1.8
   Etlsystems ≫ H0104d1ula-22460 Version -
Etlsystems ≫ H0108d1ula-22461 Firmware Version 1.8
   Etlsystems ≫ H0108d1ula-22461 Version -
Etlsystems ≫ D0104s1ula-22410 Firmware Version 1.8
   Etlsystems ≫ D0104s1ula-22410 Version -
Etlsystems ≫ D0108s1ula-22412 Firmware Version 1.8
   Etlsystems ≫ D0108s1ula-22412 Version -
Etlsystems ≫ D0116s1ula-22414 Firmware Version 1.8
   Etlsystems ≫ D0116s1ula-22414 Version -
Etlsystems ≫ D0104s1ula-22450 Firmware Version 1.8
   Etlsystems ≫ D0104s1ula-22450 Version -
Etlsystems ≫ D0108s1ula-22452 Firmware Version 1.8
   Etlsystems ≫ D0108s1ula-22452 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.057
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

https://www.etlsystems.com/
Product
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67013%20_%20ETL%20Systems%20Ltd%20DEXTRA%20Series%20_%20CSRF
Third Party Advisory
Exploit