Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2015-0924: Ceragon FibeAir IP-10 bridges allow remote login with default password
CVE-2015-0924 · published 11 years ago
Summary
The Ceragon FibeAir IP-10C, IP-10E, and IP-10G bridge devices ship with a preset password for the root account. This lets anyone on the network connect through web, SSH, Telnet, or command-line interfaces and take control of the device. Change the default password to a strong, unique one as soon as the equipment is installed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ceragon | fiberair_ip-10c |
All versions
cpe:2.3:h:ceragon:fiberair_ip-10c:-:*:*:*:*:*:*:* |
| ceragon | fiberair_ip-10e |
All versions
cpe:2.3:h:ceragon:fiberair_ip-10e:-:*:*:*:*:*:*:* |
| ceragon | fiberair_ip-10g |
All versions
cpe:2.3:h:ceragon:fiberair_ip-10g:-:*:*:*:*:*:*:* |
Original advisory text
Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI session.
Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI session.
References
- http://www.kb.cert.org/vuls/id/936356 Third Party Advisory US Government Resource
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.8
High
Type
CWE-255Credentials Management Errors
Timeline
Published17 Jan 2015
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-0924 · NVD
Track software like this
Free during beta