CVE-2017-9137
HighSummary
Ceragon FibeAir IP-10 wireless radios through version 7.2.0 have a default password 'mateidu' for a hidden user account. This account can be accessed via both the web interface and SSH, with SSH providing an attacker access to a Linux shell.
Risk Assessment
Leaving the default password unchanged poses a significant risk as it allows attackers to access critical device settings and gain full control over the operating system.
Recommendation
It is recommended to immediately change the default password for the mateidu account to eliminate this vulnerability.
Other vulnerabilities in Ceragon FibeAir IP-10
See all- CVE-2015-0936Critical
Ceragon FibeAir IP-10 has a default SSH public key in the authorized_keys file for the mateidu user, allowing remote attackers to gain SSH access by leveraging knowledge of the private key.
- CVE-2016-10309Critical
In the GUI of Ceragon FibeAir IP-10 (before version 7.2.0), a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.
Original NVD description (English source)
Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability."