The ihub tag on WindowsForum.com covers discussions about Iskra iHUB and iHUB Lite smart-metering gateways, particularly a critical security vulnerability. The content focuses on CVE-2025-13510, a severe unauthenticated access flaw in these devices' web management interfaces. This vulnerability allows remote attackers to reconfigure devices, push firmware updates, and manipulate connected systems without authentication. The advisory assigns a CVSS v4 base score of 9.3, indicating the highest severity. Discussions include technical details of the exploit, potential impacts on smart-metering infrastructure, and mitigation strategies. The tag is relevant for IT professionals, security researchers, and enterprise administrators managing Iskra iHUB deployments.
-
The newly disclosed advisory for Iskra’s iHUB and iHUB Lite smart‑metering gateways warns of a severe, remotely exploitable weakness: the devices’ web management interface can be accessed and used to change critical settings without any authentication, allowing an unauthenticated attacker to...