What’s Vulnerable › Vulnerabilities

CVE-2025-13510: Iskra iHUB and iHUB Lite has a Missing Authentication for Critical Function vulnerabilitiy

• Severity: critical (CVSS 9.3 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-02 · updated 2026-10-18
• Weakness: CWE-306

Description

The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.

Affected products

• Iskra iHUB and iHUB Lite: all versions

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-02

Get alerted when CVE-2025-13510 or the next vulnerability affects your stack