PT-2015-4974 · Ceragon · Ceragon Fibeair Ip-10

Jasper Greve · Publicado 2015-01-17 · Atualizado 2017-05-27 · CVE-2015-0924

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Ceragon FibeAir IP-10 bridges (affected versions not specified)

Description The issue concerns a default password for the root account in Ceragon FibeAir IP-10 bridges, making it easier for remote attackers to gain access. Attackers can obtain access via various sessions, including (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI.

Recommendations For Ceragon FibeAir IP-10 bridges, change the default password for the root account to a strong, unique password to prevent unauthorized access. As a temporary workaround, consider restricting access to the HTTP, SSH, TELNET, and CLI sessions until the default password issue is resolved. Restrict access to the root account to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-0924

Produtos afetados

Ceragon Fibeair Ip-10

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-0924 · Nota de Segurança
• http://kb.cert.org/vuls/id/936356 · Nota