CVE-2015-0936: Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which...

Security readout for executives and security teams

Ceragon FibeAir IP-10 devices reportedly shipped with a shared SSH authorized key for the mateidu user. Anyone who has the corresponding private key could log in remotely where SSH is reachable. This is a serious access-control failure for exposed or weakly segmented radio management interfaces. Organizations using Ceragon FibeAir IP-10 with SSH enabled are the likely exposure group, especially if management interfaces are internet-accessible, shared across provider networks, or reachable from untrusted internal segments. Treat this as high priority if any affected radios are reachable over SSH. The business risk is unauthorized administrative access to network infrastructure, with limited public evidence about official fixes or affected versions. Mitigation focus: Inventory Ceragon FibeAir IP-10 assets and identify SSH-reachable management interfaces.; Restrict SSH management access to trusted administrative networks only.; Check Ceragon or service-provider guidance for supported remediation or firmware updates..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.