Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the…
Priority HIGH 82CWE-320Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
Why it matters now
EPSS 0.78237 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ceragon:fibeair_ip-10_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ceragon |
| cpe:2.3:h:ceragon:fibeair_ip-10c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ceragon |
| cpe:2.3:h:ceragon:fibeair_ip-10e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ceragon |
| cpe:2.3:h:ceragon:fibeair_ip-10g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ceragon |
- cpe:2.3:o:ceragon:fibeair_ip-10_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ceragon
- cpe:2.3:h:ceragon:fibeair_ip-10c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ceragon
- cpe:2.3:h:ceragon:fibeair_ip-10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ceragon
- cpe:2.3:h:ceragon:fibeair_ip-10g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ceragon
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-0936
- 2026-10-03 Alias added: GHSA-qrgf-jvhv-vqxg
References
Exploit 2
- https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=2&cad=rja&uact=8&ved=0ahUKEwjs47SGp47UAhVF5iYKHYGLDQkQFggoMAE&url=https%3A%2F%2Fwww.rapid7.com%2Fdb%2Fmodules%2Fexploit%2Flinux%2Fssh%2Fceragon_fibeair_known_privkey&usg=AFQjCNFZiZcWj47cpqPX-AbfpsW0DL4yYw
- http://packetstormsecurity.com/files/131260/Ceragon-FibeAir-IP-10-SSH-Private-Key-Exposure.html
More Ceragon Fibeair Ip-10 Firmware vulnerabilities
- TI-2016-08371 In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2015-0936 · CVE Program
- CVE-2015-0936 · NVD
- FIRST EPSS
- GHSA-qrgf-jvhv-vqxg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences