« Volver al listado

CVE-2015-0924

Estado: ModificadaAlta (7.8)—

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI session.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Ceragon — Fiberair Ip-10cCeragon — Fiberair Ip-10eCeragon — Fiberair Ip-10g

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0924",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:C/A:N",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-01-17T11:59:06.127",
  "references": [
    {
      "url": "http://www.kb.cert.org/vuls/id/936356",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/936356",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1) HTTP, (2) SSH, (3) TELNET, or (4) CLI session."
    },
    {
      "lang": "es",
      "value": "Los puentes FibeAir IP-10 de Ceragon, presentan una contraseña por defecto para la cuenta root, que hace más fácil para los atacantes remotos obtener el acceso por medio de una sesión (1) HTTP, (2) SSH, (3) TELNET, o (4) CLI."
    }
  ],
  "lastModified": "2026-06-17T00:21:09.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ceragon:fiberair_ip-10c:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05F4F3E5-3477-4574-9B3A-2159F635A216"
            },
            {
              "criteria": "cpe:2.3:h:ceragon:fiberair_ip-10e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2672F10-4932-48DE-812F-280916A94686"
            },
            {
              "criteria": "cpe:2.3:h:ceragon:fiberair_ip-10g:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE03D0D3-AD96-4B34-81AE-DA2533B48382"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}