CVE-2015-0936

Critical

Published: 01/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Ceragon FibeAir IP-10 has a default SSH public key in the authorized_keys file for the mateidu user, allowing remote attackers to gain SSH access by leveraging knowledge of the private key.

Risk Assessment

Attackers could gain unauthorized access to the system, posing a serious threat to the security of the organization's data and infrastructure.

Recommendation

It is recommended to remove the default SSH public key and configure unique keys for users to secure access to the system.

Original NVD description (English source)

Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.