CVE-2021-27159

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
23%
Percentile
97.8
In the wild
Unconfirmed
What it is

⚠️ Surprise! Your FiberHome HG6245D could be a sitting duck with hardcoded admin credentials! 🦸‍♂️ Think of it like a restaurant where the owner accidentally leaves the keys to the safe under the doormat. Anyone who knows to look can stroll right in and take whatever they want without breaking a sweat! An attacker with access to these hardcoded credentials could easily waltz into the device's admin panel. This means they could change settings, intercept user data, or even take control of your ISP's network—absolutely devastating!

Put simply

Think of it like a restaurant where the owner accidentally leaves the keys to the safe under the doormat. Anyone who knows to look can stroll right in and take whatever they want without breaking a sweat! The FiberHome HG6245D devices have hardcoded credentials (user: admin, password: 888888) in their web daemon. This means that anyone who gains access can authenticate without any additional security checks.

What to do

An attacker with access to these hardcoded credentials could easily waltz into the device's admin panel. This means they could change settings, intercept user data, or even take control of your ISP's network—absolutely devastating! Immediately change the default credentials on affected devices, if possible. It's also a good idea to monitor network traffic for any suspicious activity and consider implementing additional security measures, such as firewalls or access controls. You've got this! Take these steps to secure your devices, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23046 · 97.8th percentile
Published
2021-02-10T18:37Z
EPSS history
Timeline
  • 10 FEB 18:37Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5