VULNERABILITY INTELLIGENCE
CVE-2025-13510
EPSS probability0.62%
CISA KEVNot currently listed
Published2025-12-02
Last modified2026-10-18
Description
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-306