CVE-2021-27168

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ There's a secret password tucked away for the rdsadmin account on FiberHome HG6245D devices! This 6GFJdY4aAuUKJjdtSn7d password might not scream danger, but it definitely raises eyebrows. 🔍 Think of it like finding a keycard that lets you into a secure area of a building, but nobody knows where it came from or who still has access. It’s just hanging around, waiting for the wrong person to use it. If an attacker stumbles upon this password, they could potentially gain unauthorized access to sensitive settings on your network device. While not currently known to be exploited, leaving this door open could lead to misconfigurations or data exposure that you never signed up for!

Put simply

Think of it like finding a keycard that lets you into a secure area of a building, but nobody knows where it came from or who still has access. It’s just hanging around, waiting for the wrong person to use it. This vulnerability exists due to the exposure of a default password for the rdsadmin account in FiberHome HG6245D devices, which could allow unauthorized access to system-level functions.

What to do

If an attacker stumbles upon this password, they could potentially gain unauthorized access to sensitive settings on your network device. While not currently known to be exploited, leaving this door open could lead to misconfigurations or data exposure that you never signed up for! To protect your network, change the default password immediately and ensure that this account is restricted from unauthorized access. Regularly audit your device settings and user accounts to prevent any potential breaches. 🛡️ You've got this! By taking these steps, you can secure your devices and keep your network safe! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19844 · 97.4th percentile
Published
2021-02-10T18:36Z
EPSS history
Timeline
  • 10 FEB 18:36Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5