published February 10, 2021
⚠️ The telnet daemon on FiberHome HG6245D devices has a sneaky gap — with just the default gpon credentials, an attacker can waltz in through port 23! Think of it like a backdoor left ajar in a building. Anyone with the right key can stroll in unnoticed and access sensitive areas that should be off-limits. If exploited, this vulnerability could allow an attacker to gain unauthorized access to the device, potentially altering settings or intercepting traffic — not exactly a welcome guest! While recent reports don’t confirm active exploitation, having an unsecured entry point is a risk you don’t want to take lightly.
Think of it like a backdoor left ajar in a building. Anyone with the right key can stroll in unnoticed and access sensitive areas that should be off-limits. The vulnerability stems from the telnet service running on FiberHome HG6245D devices, which can be accessed using the default 'gpon' credentials. This means that if someone knows or guesses these credentials, they can log into the device and manipulate it.
If exploited, this vulnerability could allow an attacker to gain unauthorized access to the device, potentially altering settings or intercepting traffic — not exactly a welcome guest! While recent reports don’t confirm active exploitation, having an unsecured entry point is a risk you don’t want to take lightly. To protect your devices, immediately change the default gpon credentials to something strong and unique. Consider disabling the telnet service altogether if it's not in use, and stay updated with any vendor patches for your device. You've got this! With a few simple steps, you can secure your devices and keep the sneaky intruders at bay! 🛡️