CVE-2021-27158

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

⚠️ A pair of hardcoded credentials is lurking in the FiberHome HG6245D web daemon like an uninvited guest at a party! 🎉 It's like having a front door key that anyone can find under the welcome mat—so easy for an intruder to stroll right in without a second thought! If someone stumbles upon these credentials, they could gain unauthorized access to your device, enabling a host of malicious activities. This could lead to network downtime or exposing sensitive data, which is definitely not a party you want to throw!

Put simply

It's like having a front door key that anyone can find under the welcome mat—so easy for an intruder to stroll right in without a second thought! This vulnerability involves hardcoded credentials (L1vt1m4eng / 888888) that allow unauthorized access to the FiberHome HG6245D web daemon. Since these credentials are embedded in the firmware, they can be easily exploited by attackers.

What to do

If someone stumbles upon these credentials, they could gain unauthorized access to your device, enabling a host of malicious activities. This could lead to network downtime or exposing sensitive data, which is definitely not a party you want to throw! To safeguard your network, change the default credentials immediately and ensure only trusted users have access. Additionally, consider updating the firmware to a newer version if available, as this may help close any backdoors left by hardcoded details. You've got this! Take these steps, and you'll lock down your FiberHome device like a true security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23633 · 97.8th percentile
Published
2021-02-10T18:37Z
EPSS history
Timeline
  • 10 FEB 18:37Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5