CVE-2025-57174 affects Siklu Communications Etherhaul 8010TX and 1200FX devices running firmware versions 7.4.0 through 10.7.3. The vulnerability arises from the rfpiped service listening on TCP port 555, which uses static AES encryption keys hardcoded in the binary. These keys are identical across all affected devices, enabling an attacker to craft encrypted packets that bypass authentication and execute arbitrary commands remotely. This issue represents a failed patch attempt for CVE-2017-7318 and potentially impacts other Etherhaul series devices using shared firmware components.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary commands on affected devices, compromising confidentiality, integrity, and availability. Given the critical CVSS score of 9.8, the impact includes full system compromise, potentially leading to device takeover, disruption of network communications, and unauthorized control over device functions.

No official patch or fix is currently available as per the provided data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to TCP port 555 on affected devices to trusted networks only and monitor for suspicious activity targeting this service. Consider isolating affected devices from untrusted networks to reduce exposure.