CVE-2025-67013
Estado: AnalizadaMedia (6.5)—
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (27)
Etlsystems — C0401d1uia-22476 FirmwareEtlsystems — C0401d1ula-22419 FirmwareEtlsystems — C0401d1ula-22456 FirmwareEtlsystems — C0401s1ula-22418 FirmwareEtlsystems — C0401s1ula-22455 FirmwareEtlsystems — C0801d1ula-22421 FirmwareEtlsystems — C0801d1ula-22458 FirmwareEtlsystems — C0801s1ula-22420 FirmwareEtlsystems — C0801s1ula-22457 FirmwareEtlsystems — C1601s1uia-22479 FirmwareEtlsystems — C1601s1ula-22422 FirmwareEtlsystems — C1601s1ula-22459 FirmwareEtlsystems — D0104d1ula-22411 FirmwareEtlsystems — D0104d1ula-22451 FirmwareEtlsystems — D0104s1ula-22410 FirmwareEtlsystems — D0104s1ula-22450 FirmwareEtlsystems — D0108d1uia-22473 FirmwareEtlsystems — D0108d1ula-22413 FirmwareEtlsystems — D0108d1ula-22453 FirmwareEtlsystems — D0108s1ula-22412 FirmwareEtlsystems — D0108s1ula-22452 FirmwareEtlsystems — D0116s1uia-22474 FirmwareEtlsystems — D0116s1ula-22414 FirmwareEtlsystems — D0116s1ula-22454 FirmwareEtlsystems — H0104d1ula-22460 FirmwareEtlsystems — H0108d1ula-22431 FirmwareEtlsystems — H0108d1ula-22461 Firmware
CWE
- CWE-352
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-67013",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-67013",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-12-26T16:28:49.745848Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2025-12-26T16:15:44.367",
"references": [
{
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67013%20_%20ETL%20Systems%20Ltd%20DEXTRA%20Series%20_%20CSRF",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://www.etlsystems.com/",
"tags": [
"Product"
],
"source": "cve@mitre.org"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints."
}
],
"lastModified": "2026-06-17T09:57:22.243",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0116s1ula-22454_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A956563-B69E-4D24-A05D-A9F81374234C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0116s1ula-22454:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D389841E-9F56-4547-8A3F-C6558F478605"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0116s1uia-22474_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B38C657-791F-4857-B6BB-B561FF3DF2C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0116s1uia-22474:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C58A3924-12E1-41BF-8503-D944157B0486"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0401s1ula-22418_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E266D8F-7A51-4E76-88A6-D0F8CC35353D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0401s1ula-22418:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6CD95334-9D68-482E-84EF-2C7F4BAC095D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0801s1ula-22420_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF8601E5-B0D3-42E8-A1BF-5AAB2F2603B1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0801s1ula-22420:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "599A9F22-4792-451F-BC8B-9C8F317D37CC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c1601s1ula-22422_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "023BD34A-4E84-4372-8948-A662E2B3311B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c1601s1ula-22422:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9CA2E82A-9A88-4447-B44B-9A64BEF03995"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0401s1ula-22455_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EFD655E-A0AF-4556-AC5F-6FD81DF1F9C3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0401s1ula-22455:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0F272578-4821-499F-9465-9DADCFF18788"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0801s1ula-22457_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6065A81E-8311-47EE-9E59-BF0A552D8CD0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0801s1ula-22457:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "35A00256-4B59-4DBF-99DA-CC8236E513C5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c1601s1ula-22459_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5815AB76-D420-46EE-BB39-A4E81CB34E2A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c1601s1ula-22459:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FEF88591-638A-4121-A025-565D132E77C9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c1601s1uia-22479_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A779FE0-C09A-411C-9D29-94435CBE71D8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c1601s1uia-22479:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "434E9229-23A0-4E09-B3D0-42B77FEFF688"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0104d1ula-22411_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A40740A6-D154-4557-9AD1-53E1990EECB4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0104d1ula-22411:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D46C548C-6E7F-4C9A-B999-E9AEA389976D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0108d1ula-22413_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "318A137D-0287-48BB-9C6C-6FC6D5A9D3C4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0108d1ula-22413:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "89529D5E-5F4D-4DE5-9558-A4C808F6CEBC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0104d1ula-22451_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1887BA12-8349-4CFC-AD6A-9D985F5039A0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0104d1ula-22451:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5731B102-9BB5-43FC-A51F-89F6D339293C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0108d1ula-22453_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B42B425-B39E-448E-B0D6-C7292F1B09DF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0108d1ula-22453:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FA1640A-0330-4FB6-A43C-F0D28516CAEA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0108d1uia-22473_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1292ED96-B189-4216-96D7-8BB3D171ABA4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0108d1uia-22473:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05CF574F-283B-4F33-A8D8-F51F3B1BE4AF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0401d1ula-22419_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D460DD4-243A-4542-A5D3-9E3AE14277DA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0401d1ula-22419:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2E8E21D1-B102-4CA1-A21B-E73D1C195DD6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0801d1ula-22421_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF0A8D46-9D21-450E-86B3-77F912B4529C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0801d1ula-22421:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BDE798E2-21E3-46A4-9A96-84097B758CFF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0401d1ula-22456_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF1E4071-33E7-433A-9C70-B74B4CB72D09"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0401d1ula-22456:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98EAEDDE-8D8D-489C-AE6A-FA7F176FD59E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0801d1ula-22458_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E483B51-FEC3-41FD-A0FB-8E32DD524396"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0801d1ula-22458:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BA48A5ED-6D0A-40D5-89D7-17E9CB82B6C2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:c0401d1uia-22476_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CE428D3-4709-4283-A0AD-C188D6F05F2E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:c0401d1uia-22476:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "33996E70-1B87-4473-B629-2E8DBE9832EF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:h0108d1ula-22431_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52C30944-7988-4230-992D-60D543A524EA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:h0108d1ula-22431:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CBE63386-85FE-4C84-986F-C30597B8EC06"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:h0104d1ula-22460_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2486ACA-FF49-481A-80BD-813320E43A78"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:h0104d1ula-22460:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0724E86B-1A4F-470B-9DD0-70B894E6FA20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:h0108d1ula-22461_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C45E0515-D994-4AEC-A9F2-FE45CFAE6186"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:h0108d1ula-22461:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3F21FF66-3965-412E-9EB0-2299430908AF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0104s1ula-22410_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2461E72-2D2D-42FE-973B-D8CF970F4508"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0104s1ula-22410:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48F40E48-6241-4A09-97C8-F7E142AEEA30"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0108s1ula-22412_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F420ED07-A318-48F9-A774-3F20DBD6E9ED"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0108s1ula-22412:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "21E1EC92-35FC-425A-8AC2-6E8B172D721F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0116s1ula-22414_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F43F0EA-7603-4F3F-A57C-F83631E0C37A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0116s1ula-22414:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D2CBA22-C617-4E56-AF35-2BB07AD44E38"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0104s1ula-22450_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BD6A9EF-6477-4186-A245-A99515B41CFC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0104s1ula-22450:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "92ED453A-902F-4E33-B72A-DABE0157E0A1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:etlsystems:d0108s1ula-22452_firmware:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ABAC078-9BA8-4E5E-885A-7BFD30F8E756"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:etlsystems:d0108s1ula-22452:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4134CC9F-3783-4B05-A3A0-6095C61B0303"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}