CVE-2021-27167

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
15%
Percentile
96.6
In the wild
Unconfirmed
What it is

🚨 A four-character password for admin access? That’s like using a paperclip to keep your front door locked! 🔐 Think of it as a restaurant with a single, simple key that anyone can replicate. If you only need four bits to unlock the door, it’s surprisingly easy for an intruder to get in undetected. An attacker could waltz right into the admin panel, potentially gaining full control over the device. This could lead to unauthorized access to sensitive settings, change configurations, or even manipulate network traffic. The consequences could be far-reaching, especially if the device is connected to critical systems.

Put simply

Think of it as a restaurant with a single, simple key that anyone can replicate. If you only need four bits to unlock the door, it’s surprisingly easy for an intruder to get in undetected. This vulnerability arises from a weak admin password mechanism on FiberHome HG6245D devices, where the password consists of only four hexadecimal characters generated at startup, making it vulnerable to brute-force attacks.

What to do

An attacker could waltz right into the admin panel, potentially gaining full control over the device. This could lead to unauthorized access to sensitive settings, change configurations, or even manipulate network traffic. The consequences could be far-reaching, especially if the device is connected to critical systems. To secure your device, change the default admin password to a more complex and robust one immediately. Implement network segmentation to limit access to the device’s management interface and consider disabling remote management if not needed. Stay updated with any firmware patches that may address security flaws. You’ve got this! Just follow these steps and you’ll be securing your network in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14590 · 96.6th percentile
Published
2021-02-10T18:36Z
EPSS history
Timeline
  • 10 FEB 18:36Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5