Skip to content
Noroxi

ceragon records

5 published records for vendor ceragon. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 20%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2015-0936
    62This week

    Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtai

    CriticalCVSS 9.8WeaponizedEPSS 78%

    ceragon · fibeair ip-10 firmwareJun 1, 2017

  • CVE-2016-10309
    40Plan

    In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with t

    CriticalCVSS 9.8No exploitEPSS 1%

    ceragon · fibeair ip-10 firmwareMar 30, 2017

  • CVE-2015-0924
    31Monitor

    Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via

    HighCVSS 7.8No exploitEPSS 1%

    ceragon · fiberair ip-10cJan 17, 2015

  • CVE-2017-9137
    29Monitor

    Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account establ

    HighCVSS 7.3No exploitEPSS 0%

    ceragon · fiberair ip-10 firmwareMay 21, 2017

  • CVE-2025-57175
    27Monitor

    Siklu EtherHaul 8010 siklu-uimage-nxp-enc-10_6_2-18707-ea552dc00b devices have a static root password.

    MediumCVSS 6.8No exploitEPSS 0%

    ceragon · etherhaul-8010fx firmwareApr 8, 2026