RSS   Vulnerabilities for 'Fiberair ip-10 firmware'   RSS

2017-06-01
 
CVE-2015-0936

 

 
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.

 
2017-05-21
 
CVE-2017-9137

CWE-1188
 

 
Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability."

 

 >>> Vendor: Ceragon 5 Products
Fiberair ip-10c
Fiberair ip-10e
Fiberair ip-10g
Fibeair ip-10 firmware
Fiberair ip-10 firmware


Copyright 2024, cxsecurity.com

 

Back to Top