CVE-2015-0936
CriticalSummary
Ceragon FibeAir IP-10 has a default SSH public key in the authorized_keys file for the mateidu user, allowing remote attackers to gain SSH access by leveraging knowledge of the private key.
Risk Assessment
Attackers could gain unauthorized access to the system, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to remove the default SSH public key and configure unique keys for users to secure access to the system.
Other vulnerabilities in Ceragon FibeAir IP-10
See all- CVE-2017-9137High
Ceragon FibeAir IP-10 wireless radios through version 7.2.0 have a default password 'mateidu' for a hidden user account. This account can be accessed via both the web interface and SSH, with SSH providing an attacker access to a Linux shell.
- CVE-2016-10309Critical
In the GUI of Ceragon FibeAir IP-10 (before version 7.2.0), a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.
Original NVD description (English source)
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.