Skip to main content

CISA issues alert on Iskra iHUB authentication flaw

Source Decision Insights Threat Desk Published December 2, 2025 Companies 1
Human View Machine View

361st article in the last 90 days, one of 476 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA issues alert on Longwatch code injection (Dec 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
How to start
Adoption curve
Early Majority
Industry
Utilities / Electric Utilities / Energy

Our classification, not the publisher's statement. Best suited for, not only for.

Iskra iHUB and iHUB Lite smart metering gateways contain a Missing Authentication for Critical Function that allows remote actors to reach the device management interface and change configuration and firmware without providing credentials.

The affected products are iHUB and iHUB Lite: All Versions. The issue is classified as Missing Authentication for Critical Function CWE-306 and stems from the web management interface exposing management functions without requiring authentication, permitting unauthenticated users to access and modify critical device settings. CVE-2025-13510 has been assigned; a Common Vulnerability Scoring System (CVSS) v3.1 base score of 9.1 was calculated with vector (Antivirus Software (AV):N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). A CVSS v4 base score of 9.3 was calculated with vector Antivirus Software (AV):N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N. CRITICAL INFRASTRUCTURE SECTORS: Energy; COUNTRIES/AREAS DEPLOYED: Worldwide; COMPANY HEADQUARTERS LOCATION: Slovenia. The vulnerability was reported to CISA by Souvik Kandar.

Successful exploitation could allow a remote attacker to reconfigure devices, update firmware, and manipulate connected systems without any credentials.

Iskra Decentralized Identity (DID) not respond to CISA's request for coordination; CISA advises contacting Iskra through the company's contact page for additional information. No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.

CISA recommends users take defensive measures to minimize network exposure for all control system devices and systems, ensuring they are not accessible from the Internet. CISA also advises locating control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, CISA advises using more secure methods such as Virtual Private Networks (VPNs), noting VPNs may have vulnerabilities and should be updated to the most current version available and that a Virtual Private Network (VPN) is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures, points to control systems security recommended practices on the ICS webpage including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies, references additional mitigation guidance in ICS-TIP-12-146-01B, and advises organizations observing suspected malicious activity to follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-alert-on-iskra-ihub-authentication-flaw/",
        "name": "CISA issues alert on Iskra iHUB authentication flaw",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-iskra-ihub-authentication-flaw/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
      "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Utilities / Electric Utilities / Energy"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:07:25-06:00",
    "datePublished": "2025-12-02T11:53:27-07:00",
    "description": "Iskra iHUB vulnerability: CISA reports iHUB and iHUB Lite expose an unauthenticated web interface allowing remote configuration (CVE-2025-13510).",
    "headline": "CISA issues alert on Iskra iHUB authentication flaw",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-336-02"
    },
    "keywords": [
      "Antivirus Software",
      "Authentication",
      "Common Vulnerability Scoring System",
      "Firmware",
      "Virtual Private Network",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-iskra-ihub-authentication-flaw/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages