CVE-2021-27162

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
โ€”
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

โš ๏ธ A hardcoded username and password are lurking in FiberHome HG6245D devices, just waiting for an opportunistic attacker! ๐Ÿšจ Think of it like a restaurant where the staff leaves the front door wide open with a sign saying 'Come in, the valuables are on the counter!' This lack of security makes it far too easy for anyone to waltz in and have their way. With these hardcoded credentials, an attacker could gain unauthorized access to the device and potentially manipulate network settings, intercept communications, or even launch attacks on connected devices. It's like giving someone the keys to your digital fortress โ€” a pretty risky move!

Put simply

Think of it like a restaurant where the staff leaves the front door wide open with a sign saying 'Come in, the valuables are on the counter!' This lack of security makes it far too easy for anyone to waltz in and have their way. This vulnerability allows unauthorized access to FiberHome HG6245D devices through hardcoded credentials that could be exploited if an attacker knows the default username and password, effectively allowing them to take control of the device.

What to do

With these hardcoded credentials, an attacker could gain unauthorized access to the device and potentially manipulate network settings, intercept communications, or even launch attacks on connected devices. It's like giving someone the keys to your digital fortress โ€” a pretty risky move! To protect your network, change the default credentials as soon as possible and ensure that all devices are updated to the latest firmware versions. Additionally, consider implementing network security measures such as firewalls to minimize exposure. You've got this! Following these steps will help secure your devices and keep your network safe. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27825 ยท 98.1th percentile
Published
2021-02-10T18:37Z
EPSS history
Timeline
  • 10 FEB 18:37Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5