CVE Feed

    Dashboard / CVE / CVE-2025-67013

    CVE-2025-67013

    The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.

    Published:Dec 26, 2025
    Last Modified:Jan 2, 2026
    EPS:Dec 26, 2025
    EPSS Score:0.00018
    CVSS Score:6.5

    Affected Products

    Vendor
    Etlsystems
    Product
    C0401d1uia-22476
    Vendor
    Etlsystems
    Product
    C0401d1uia-22476 Firmware
    Vendor
    Etlsystems
    Product
    C0401d1ula-22419
    Vendor
    Etlsystems
    Product
    C0401d1ula-22419 Firmware
    Vendor
    Etlsystems
    Product
    C0401d1ula-22456
    Vendor
    Etlsystems
    Product
    C0401d1ula-22456 Firmware
    Vendor
    Etlsystems
    Product
    C0401s1ula-22418
    Vendor
    Etlsystems
    Product
    C0401s1ula-22418 Firmware
    Vendor
    Etlsystems
    Product
    C0401s1ula-22455
    Vendor
    Etlsystems
    Product
    C0401s1ula-22455 Firmware
    Vendor
    Etlsystems
    Product
    C0801d1ula-22421
    Vendor
    Etlsystems
    Product
    C0801d1ula-22421 Firmware
    Vendor
    Etlsystems
    Product
    C0801d1ula-22458
    Vendor
    Etlsystems
    Product
    C0801d1ula-22458 Firmware
    Vendor
    Etlsystems
    Product
    C0801s1ula-22420
    Vendor
    Etlsystems
    Product
    C0801s1ula-22420 Firmware
    Vendor
    Etlsystems
    Product
    C0801s1ula-22457
    Vendor
    Etlsystems
    Product
    C0801s1ula-22457 Firmware
    Vendor
    Etlsystems
    Product
    C1601s1uia-22479
    Vendor
    Etlsystems
    Product
    C1601s1uia-22479 Firmware
    Vendor
    Etlsystems
    Product
    C1601s1ula-22422
    Vendor
    Etlsystems
    Product
    C1601s1ula-22422 Firmware
    Vendor
    Etlsystems
    Product
    C1601s1ula-22459
    Vendor
    Etlsystems
    Product
    C1601s1ula-22459 Firmware
    Vendor
    Etlsystems
    Product
    D0104d1ula-22411
    Vendor
    Etlsystems
    Product
    D0104d1ula-22411 Firmware
    Vendor
    Etlsystems
    Product
    D0104d1ula-22451
    Vendor
    Etlsystems
    Product
    D0104d1ula-22451 Firmware
    Vendor
    Etlsystems
    Product
    D0104s1ula-22410
    Vendor
    Etlsystems
    Product
    D0104s1ula-22410 Firmware
    Vendor
    Etlsystems
    Product
    D0104s1ula-22450
    Vendor
    Etlsystems
    Product
    D0104s1ula-22450 Firmware
    Vendor
    Etlsystems
    Product
    D0108d1uia-22473
    Vendor
    Etlsystems
    Product
    D0108d1uia-22473 Firmware
    Vendor
    Etlsystems
    Product
    D0108d1ula-22413
    Vendor
    Etlsystems
    Product
    D0108d1ula-22413 Firmware
    Vendor
    Etlsystems
    Product
    D0108d1ula-22453
    Vendor
    Etlsystems
    Product
    D0108d1ula-22453 Firmware
    Vendor
    Etlsystems
    Product
    D0108s1ula-22412
    Vendor
    Etlsystems
    Product
    D0108s1ula-22412 Firmware
    Vendor
    Etlsystems
    Product
    D0108s1ula-22452
    Vendor
    Etlsystems
    Product
    D0108s1ula-22452 Firmware
    Vendor
    Etlsystems
    Product
    D0116s1uia-22474
    Vendor
    Etlsystems
    Product
    D0116s1uia-22474 Firmware
    Vendor
    Etlsystems
    Product
    D0116s1ula-22414
    Vendor
    Etlsystems
    Product
    D0116s1ula-22414 Firmware
    Vendor
    Etlsystems
    Product
    D0116s1ula-22454
    Vendor
    Etlsystems
    Product
    D0116s1ula-22454 Firmware
    Vendor
    Etlsystems
    Product
    H0104d1ula-22460
    Vendor
    Etlsystems
    Product
    H0104d1ula-22460 Firmware
    Vendor
    Etlsystems
    Product
    H0108d1ula-22431
    Vendor
    Etlsystems
    Product
    H0108d1ula-22431 Firmware
    Vendor
    Etlsystems
    Product
    H0108d1ula-22461
    Vendor
    Etlsystems
    Product
    H0108d1ula-22461 Firmware

    Exploits

    https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-67013%20_%20ETL%20Systems%20Ltd%20DEXTRA%20Series%20_%20CSRF

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High