Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ceragon FibeAir IP-10 wireless radios 安全漏洞
Vulnerability Description
Ceragon FibeAir IP-10 wireless radios是以色列Ceragon公司的一款无线微波传输设备。 Ceragon FibeAir IP-10 wireless radios 7.2.0及之前的版本中存在安全漏洞,该漏洞源于mateidu账户设有默认密码。攻击者可利用该漏洞借助Web界面和SSH利用该漏洞获取设备设置的只读权限,或Linux shell的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A