Back to Database
Status published
Critical
CVE-2025-13510
Iskra iHUB and iHUB Lite has a Missing Authentication for Critical Function vulnerabilitiy
Vulnerability Description
The Iskra iHUB and iHUB Lite smart metering gateway exposes its web management interface without requiring authentication, allowing unauthenticated users to access and modify critical device settings.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13510
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Souvik Kandar
Affected Vendor
Iskra
View all reports →Affected Software
iHUB and iHUB Lite
Vulnerable Versions:
All versions
Timeline
Official Publish:
December 2nd, 2025
Last Modified:
December 2nd, 2025
Added to House:
July 22nd, 2026