Ceragon Siklu MultiHaul and EtherHaul Series

Ceragon Siklu MultiHaul and EtherHaul radio relay units are affected by an arbitrary file upload vulnerability in their management interfaces. An attacker with network access to the management interface can upload arbitrary files without authentication, potentially compromising the device and network links it carries. The vulnerability affects multiple models across both product lines. Ceragon has released firmware updates to address the issue, but affected users should verify all units use private management IP addresses and are protected behind firewalls and access control lists. Management access should follow standard operator security guidelines and not be exposed publicly.