CVE-2025-13510CWE-306
CVE-2025-13510
published December 3, 2025
What it is
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.
The record
Technical detail
- CVSS
- 9.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00621 · 49.2th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2025-12-03T01:15Z
References (1)
EPSS history
Timeline