CVE-2025-67013 Cross-site request forgery in n/a
Attackers can force authenticated users to perform unwanted actions on the DEXTRA Series web interface due to missing CSRF protections.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-67013?
CVE-2025-67013 is a medium-severity vulnerability in n/a, published on 26 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
Weakness: CWE-352
Which versions are affected by CVE-2025-67013?
It affects 27 products.
Products include Etlsystems C0401d1uia-22476 Firmware, Etlsystems C0401d1ula-22419 Firmware, Etlsystems C0401d1ula-22456 Firmware, Etlsystems C0401s1ula-22418 Firmware, Etlsystems C0401s1ula-22455 Firmware, Etlsystems C0801d1ula-22421 Firmware and 21 more.
How do I fix CVE-2025-67013?
No fix has been published for CVE-2025-67013 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-67013 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67013 exists.
Sources
Also known as GHSA-4jf5-rmwc-7vww.