CVE-2021-27147

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

⚠️ Hardcoded credentials alert! The FiberHome HG6245D devices come with a default admin/admin setup that any curious ISP can exploit! 🔥 Think of it like a hotel with a master key left out on the front desk — anyone checking in could waltz right into any room. That’s how easy it is for attackers to access sensitive settings on these devices! If someone gets their hands on these default credentials, they could gain full control over the device, tweaking settings, intercepting data, or even bringing your network to a halt. Imagine the chaos if someone changed your Wi-Fi password or rerouted all your connections!

Put simply

Think of it like a hotel with a master key left out on the front desk — anyone checking in could waltz right into any room. That’s how easy it is for attackers to access sensitive settings on these devices! This vulnerability arises from the presence of hardcoded admin credentials ('admin/admin') in the web daemon of FiberHome HG6245D devices, allowing unauthorized access to the administrative interface.

What to do

If someone gets their hands on these default credentials, they could gain full control over the device, tweaking settings, intercepting data, or even bringing your network to a halt. Imagine the chaos if someone changed your Wi-Fi password or rerouted all your connections! To protect your network, change the default admin credentials immediately and set up unique, strong passwords for all admin accounts. Additionally, consider restricting access to the web interface based on IP addresses if possible. 🛡️ You've got this! With just a few changes, you can safeguard your network and keep those pesky intruders at bay! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17138 · 97.1th percentile
Published
2021-02-10T18:39Z
EPSS history
Timeline
  • 10 FEB 18:39Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5