Ceragon Networks EtherHaul Series Unauthenticated File Upload Vulnerability

A vulnerability exists in the Ceragon Networks/Siklu Communication EtherHaul series, specifically in the 8010TX and 1200FX models, running firmware versions 7.4.0 through 10.7.3. The issue arises in the rfpiped service on TCP port 555, where unauthenticated file uploads are allowed to any writable location on the device. The file upload process employs weak encryption for metadata, while the actual file contents are transmitted in cleartext. Notably, there is no authentication or path validation implemented, leaving the devices open to potential exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, potentially allowing for the execution of malicious files or scripts on the affected device.