CVE-2016-10309

Name of the Vulnerable Software and Affected Versions Ceragon FibeAir IP-10 versions prior to 7.2.0

Description A remote attacker can bypass authentication in the GUI of affected devices by adding an ALBATROSS cookie with the value 0-4-11 to their browser.

Recommendations For versions prior to 7.2.0, update to version 7.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the GUI to minimize the risk of exploitation.