CVE-2025-67013
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
- CVSS 3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- etlsystems:c0401d1uia-22476_firmware
- etlsystems:c0401d1ula-22419_firmware
- etlsystems:c0401d1ula-22456_firmware
- etlsystems:c0401s1ula-22418_firmware
- etlsystems:c0401s1ula-22455_firmware
- etlsystems:c0801d1ula-22421_firmware
- etlsystems:c0801d1ula-22458_firmware
- etlsystems:c0801s1ula-22420_firmware
- etlsystems:c0801s1ula-22457_firmware
- etlsystems:c1601s1uia-22479_firmware
- etlsystems:c1601s1ula-22422_firmware
- etlsystems:c1601s1ula-22459_firmware
- etlsystems:d0104d1ula-22411_firmware
- etlsystems:d0104d1ula-22451_firmware
- etlsystems:d0104s1ula-22410_firmware
- etlsystems:d0104s1ula-22450_firmware
- etlsystems:d0108d1uia-22473_firmware
- etlsystems:d0108d1ula-22413_firmware
- etlsystems:d0108d1ula-22453_firmware
- etlsystems:d0108s1ula-22412_firmware
- etlsystems:d0108s1ula-22452_firmware
- etlsystems:d0116s1uia-22474_firmware
- etlsystems:d0116s1ula-22414_firmware
- etlsystems:d0116s1ula-22454_firmware
- etlsystems:h0104d1ula-22460_firmware
- etlsystems:h0108d1ula-22431_firmware
- etlsystems:h0108d1ula-22461_firmware