CVE-2021-27149

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
β€”
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

⚠️ Hardcoded credentials found in FiberHome HG6245D devices could lead anyone with insider knowledge straight to the admin panel! πŸ¦Έβ€β™‚οΈ Think of it as leaving the door to your office wide open, with a sign reading 'Admin Only!' β€” anyone who strolls by can simply waltz in without a key! If an attacker gains access to these credentials, they could fully control the device, alter settings, and potentially intercept or manipulate network traffic. The implications could range from service disruptions to unauthorized access to sensitive user data β€” yikes!

Put simply

Think of it as leaving the door to your office wide open, with a sign reading 'Admin Only!' β€” anyone who strolls by can simply waltz in without a key! This vulnerability arises from hardcoded admin credentials in the web daemon of FiberHome HG6245D devices, which can be exploited by anyone who knows where to look.

What to do

If an attacker gains access to these credentials, they could fully control the device, alter settings, and potentially intercept or manipulate network traffic. The implications could range from service disruptions to unauthorized access to sensitive user data β€” yikes! To protect your network, change the default credentials immediately and ensure that they are not hardcoded. If your devices are affected, consider contacting your ISP for an update or replacement. Regularly review your network devices for similar vulnerabilities! You've got this! With a few quick changes, you can secure your devices and keep the internet safe! πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23633 Β· 97.8th percentile
Published
2021-02-10T18:39Z
EPSS history
Timeline
  • 10 FEB 18:39Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5