CVE-2021-27146

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

🚨 Hardcoded credentials alert! Imagine finding a spare key to your ISP's office under the doormat—well, that's exactly what's happening with FiberHome HG6245D devices! 🔑 Think of a restaurant where the chef accidentally leaves the front door unlocked and the menu on display for anyone to copy. Just like that, these hardcoded admin credentials allow anyone to waltz into the device's settings without breaking a sweat. An attacker could gain full administrative access to the devices, potentially reconfiguring network settings or accessing sensitive data—like letting a stranger into the command center of a spaceship! That's a recipe for chaos!

Put simply

Think of a restaurant where the chef accidentally leaves the front door unlocked and the menu on display for anyone to copy. Just like that, these hardcoded admin credentials allow anyone to waltz into the device's settings without breaking a sweat. This vulnerability involves hardcoded admin credentials for the web daemon in FiberHome HG6245D devices, making it easier for unauthorized users to access the device's management interface directly.

What to do

An attacker could gain full administrative access to the devices, potentially reconfiguring network settings or accessing sensitive data—like letting a stranger into the command center of a spaceship! That's a recipe for chaos! To protect your network, update the device firmware if available, change any hardcoded credentials to unique, strong ones, and consider implementing a firewall to restrict access to the management interface. Regularly audit your devices for similar vulnerabilities! You've got this! With a few simple steps, you can secure your devices and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20297 · 97.5th percentile
Published
2021-02-10T18:40Z
EPSS history
Timeline
  • 10 FEB 18:40Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5