Iskra iHUB and iHUB Lite

CISA published an advisory for Iskra iHUB and iHUB Lite (CVE-2025-13510) describing a Missing Authentication for Critical Function that exposes the devices' web management interface without requiring credentials; the issue has a CVSS v4 base score of 9.3 and could allow unauthenticated remote attackers to reconfigure devices, update firmware, and manipulate connected systems. The advisory identifies the products as used in the energy sector worldwide, provides mitigation recommendations (network isolation, firewalls, secure remote access), and reports no known public exploitation at the time of publication.