CRITICAL🇵🇱 Wersja polska

CVE-2015-0936

CVSS 9.8v3.1pub. 2017-06-01upd. 2026-05-13

Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ceragon Fibeair Ip 10c

    HW
    Ceragon
    all versions

  • Ceragon Fibeair Ip 10e

    HW
    Ceragon
    all versions

  • Ceragon Fibeair Ip 10 Firmware

    OS
    Ceragon
    all versions

  • Ceragon Fibeair Ip 10g

    HW
    Ceragon
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-10309CRITICAL9.8PL ✓same product

Ceragon FibeAir IP-10 — pominięcie uwierzytelnienia przez spreparowane cookie

CVE-2017-9137HIGH7.3same vendor

Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account...

CVE-2015-0924HIGH7.8same vendor

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote a...

CVE-2025-57175MEDIUM6.4same vendor

Urządzenia Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b posiadają statyczne hasło root.