HIGH🇵🇱 Wersja polska

CVE-2015-0924

CVSS 7.8v2.0pub. 2015-01-17upd. 2026-05-06

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI session.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:C/A:N

  • Ceragon Fiberair Ip 10c

    HW
    Ceragon
    wszystkie wersje

  • Ceragon Fiberair Ip 10e

    HW
    Ceragon
    wszystkie wersje

  • Ceragon Fiberair Ip 10g

    HW
    Ceragon
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2015-0936CRITICAL9.8ten sam vendor

Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which al...

CVE-2016-10309CRITICAL9.8ten sam vendor

In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by add...

CVE-2017-9137HIGH7.3ten sam vendor

Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account...

CVE-2025-57175MEDIUM6.4ten sam vendor

Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.