Elber Communications Equipment

Summary

Vulnerabilities 2

• Critical 9.8
  CVE-2025-0674 Scanner template

  Elber Communications Equipment Authentication Bypass Using an Alternate Path or Channel

  Multiple Elber products are affected by an authentication bypass vulnerability which allows unauthorized access to the password management functionality. Attackers can exploit this issue by manipulating the endpoint to overwrite any user's password within the…

  Elber Cleber/3 Broadcast Multi-Purpose Platform ESE DVB-S/S2 Satellite Receiver Signum DVB-S/S2 IRD
  Feb 6, 2025
• High 7.5
  CVE-2025-0675

  Elber Communications Equipment Hidden Functionality

  Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.

  Elber Signum DVB-S/S2 IRD Reble610 M/ODU XPIC IP-ASI-SDH Wayber Analog/Digital Audio STL
  Feb 6, 2025

Revision history

1. 2025-02-04 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-035-03 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-03
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B