CVE-2017-9137

Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the mateidu account (a hidden user account established by the vendor). This account can be accessed via both the web interface and SSH. In the web interface, this simply grants an attacker read-only access to the device's settings. However, when using SSH, this gives an attacker access to a Linux shell. NOTE: the vendor has commented "The mateidu user is a known user, which is mentioned in the FibeAir IP-10 User Guide. Customers are instructed to change the mateidu user password. Changing the user password fully solves the vulnerability."

• CWE-1188

• http://blog.iancaling.com/post/160817658078Third Party Advisory
• http://blog.iancaling.com/post/160817658078Third Party Advisory

Published

May 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9131An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9132A hard-coded credentials issue was discovered on Mimosa Clie…
• CVE-2017-9133An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9134An information-leakage issue was discovered on Mimosa Client…
• CVE-2017-9135An issue was discovered on Mimosa Client Radios before 2.2.4…
• CVE-2017-9136An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9138There is a debug-interface vulnerability on some Tenda route…
• CVE-2017-9139There is a stack-based buffer overflow on some Tenda routers…
• CVE-2017-9140Cross-site scripting (XSS) vulnerability in Telerik.ReportVi…
• CVE-2017-9141In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an …6.5
• CVE-2017-9142In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an …6.5
• CVE-2017-9143In ImageMagick 7.0.5-5, the ReadARTImage function in coders/…6.5