CNNVD-202512-168 Information

CNNVD ID

CNNVD-202512-168

CVE-2025-13510

  • CNNVD Published: 2025-12-02

Description (Chinese)

Iskra iHUB和Iskra iHUB Lite都是斯洛文尼亚Iskra公司的一个智能计量网关。 Iskra iHUB和Iskra iHUB Lite存在访问控制错误漏洞,该漏洞源于未经验证的Web管理接口,可能导致未经授权的访问和修改。

Description (English)

Iskra iHUB and Iskra iHUB Lite are both smart metrology gateways for Iskra in Slovenia. Iskra iHUB and Iskra iHUB Lite have access control error holes, which originate from unverified Web management interfaces and may lead to unauthorized access and modification.

Hazard Level

Low

Vulnerability Type

访问控制错误

Affected Vendor

Iskra

Published

2025-12-02

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-02 https://access.redhat.com/security/cve/cve-2025-13510

Patch

https://www.iskra.eu/en/

Share on: