CVE-2015-0936
CVE-2015-0936 is a critical-severity vulnerability in Ceragon Fibeair Ip-10 Firmware with a CVSS 3.x base score of 9.8. Its EPSS exploit-prediction score of 78% places it in the 100th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-320.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- CVSS v2: 7.5
- EPSS exploit prediction: 78% (100th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-320
- Affected product: Ceragon Fibeair Ip-10 Firmware
- Published:
- Last modified:
Description
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
Frequently asked questions
- What is CVE-2015-0936?
- Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
- How severe is CVE-2015-0936?
- CVE-2015-0936 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2015-0936 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 78% (100th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2015-0936?
- CVE-2015-0936 affects Ceragon Fibeair Ip-10 Firmware. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2015-0936?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2015-0936 published?
- CVE-2015-0936 was published on 2017-06-01 and last updated on 2026-06-17.
References
- http://packetstormsecurity.com/files/131259/Ceragon-FibeAir-IP-10-SSH-Private-Key-Exposure.html
- http://packetstormsecurity.com/files/131260/Ceragon-FibeAir-IP-10-SSH-Private-Key-Exposure.html
- http://seclists.org/fulldisclosure/2015/Apr/3
- http://www.securityfocus.com/bid/73696
- https://gist.github.com/todb-r7/5d86ecc8118f9eeecc15
- https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=2&cad=rja&uact=8&ved=0ahUKEwjs47SGp47UAhVF5iYKHYGLDQkQFggoMAE&url=https%3A%2F%2Fwww.rapid7.com%2Fdb%2Fmodules%2Fexploit%2Flinux%2Fssh%2Fceragon_fibeair_known_privkey&usg=AFQjCNFZiZcWj47cpqPX-AbfpsW0DL4yYw
Affected products (1)
- cpe:2.3:o:ceragon:fibeair_ip-10_firmware:-:*:*:*:*:*:*:*
More vulnerabilities in Ceragon Fibeair Ip-10 Firmware
- CVE-2016-10309 — Critical (CVSS 9.8): In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an…
All CVEs affecting Ceragon Fibeair Ip-10 Firmware →
Other CWE-320 vulnerabilities
- CVE-2016-10467 — Critical (CVSS 9.8): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD…
- CVE-2016-10421 — Critical (CVSS 9.8): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206,…
- CVE-2018-0124 — Critical (CVSS 9.8): A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to…
- CVE-2015-4166 — Critical (CVSS 9.8): Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have…
- CVE-2024-36391 — Critical (CVSS 9.1): MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
- CVE-2019-5672 — Critical (CVSS 9.1): NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior…