CVE-2021-27170

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

⚠️ Careful! Your FiberHome HG6245D is like a party with no bouncer — those internal management interfaces are wide open to the internet! Imagine your home is a cozy cafe that forgot to lock the back door. Customers can stroll in and access all the kitchen supplies without anyone checking who they are. That's what happens here with the lack of firewall rules for IPv6 on your device. An attacker could potentially exploit this vulnerability to access sensitive management interfaces, possibly leading to reconfigurations of the device or even a full takeover. With the internal controls exposed to the internet, it's like handing over the keys to your establishment without a background check!

Put simply

Imagine your home is a cozy cafe that forgot to lock the back door. Customers can stroll in and access all the kitchen supplies without anyone checking who they are. That's what happens here with the lack of firewall rules for IPv6 on your device. This issue stems from FiberHome HG6245D devices lacking proper firewall rules for IPv6, which exposes the internal management interfaces to anyone on the internet. Essentially, there are no barriers set to protect these critical functions.

What to do

An attacker could potentially exploit this vulnerability to access sensitive management interfaces, possibly leading to reconfigurations of the device or even a full takeover. With the internal controls exposed to the internet, it's like handing over the keys to your establishment without a background check! To secure your device, implement IPv6 firewall rules immediately — restrict access to internal management interfaces. Also, ensure the firmware is up to date with the latest security patches to bolster your defenses. You've got this! A few quick changes now will keep your digital cafe running smoothly and safely. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15948 · 96.9th percentile
Published
2021-02-10T18:35Z
EPSS history
Timeline
  • 10 FEB 18:35Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5