CVE Catalog
CVE-2016-10309
CriticalSummary
In the GUI of Ceragon FibeAir IP-10 (before version 7.2.0), a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.
Risk Assessment
An attacker can gain unauthorized access to the system, posing a serious threat to data security and device integrity.
Recommendation
It is recommended to update devices to version 7.2.0 or later to eliminate this vulnerability and to monitor system access.
Original NVD description (English source)
In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.