medium6.5
CVE-2025-67013
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) pr…
Impact
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Etlsystems | D0116s1ula-22454 Firmware | Version 1.8 |
| Etlsystems | D0116s1uia-22474 Firmware | Version 1.8 |
| Etlsystems | C0401s1ula-22418 Firmware | Version 1.8 |
| Etlsystems | C0801s1ula-22420 Firmware | Version 1.8 |
| Etlsystems | C1601s1ula-22422 Firmware | Version 1.8 |
| Etlsystems | C0401s1ula-22455 Firmware | Version 1.8 |
| Etlsystems | C0801s1ula-22457 Firmware | Version 1.8 |
| Etlsystems | C1601s1ula-22459 Firmware | Version 1.8 |
| Etlsystems | C1601s1uia-22479 Firmware | Version 1.8 |
| Etlsystems | D0104d1ula-22411 Firmware | Version 1.8 |
| Etlsystems | D0108d1ula-22413 Firmware | Version 1.8 |
| Etlsystems | D0104d1ula-22451 Firmware | Version 1.8 |