CVE-2015-0936

CRITICAL 9.8CVE-2015-0936 · Published 01/06/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.

References

packetstormsecurity.com/files/131259/Ceragon-FibeAir-IP-10-SSH-Private-Key-Exposure.html · Third Party Advisory
packetstormsecurity.com/files/131260/Ceragon-FibeAir-IP-10-SSH-Private-Key-Exposure.html · Exploit
seclists.org/fulldisclosure/2015/Apr/3 · Mailing List
securityfocus.com/bid/73696 · Third Party Advisory
gist.github.com/todb-r7/5d86ecc8118f9eeecc15 · Third Party Advisory
google.com/url · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free