cvedb.io
CVE-2016-10309
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-03-30T07:59:00.267 · Last modified 2026-06-17T00:39:27.313

Summary

In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.

Affected products

ceragon — fibeair_ip-10_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when ceragon ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.