CVE-2021-27172

An issue was discovered on FiberHome HG6245D devices through RP2613

published February 10, 2021

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

⚠️ A hardcoded root password is lurking in the shadows of FiberHome HG6245D devices! This sneaky backdoor can open the gates to potential mayhem. 😱 Think of this as an unguarded vault in a bank, where the access code is written on a sticky note taped to the door—anyone could walk right in! With this hardcoded password, an attacker could gain full control of the device, allowing them to tamper with settings, intercept network traffic, and even launch further attacks. It’s a recipe for chaos in any connected environment!

Put simply

Think of this as an unguarded vault in a bank, where the access code is written on a sticky note taped to the door—anyone could walk right in! This vulnerability involves a hardcoded GEPON password for root within the system configuration script, making it vulnerable to unauthorized access if exploited.

What to do

With this hardcoded password, an attacker could gain full control of the device, allowing them to tamper with settings, intercept network traffic, and even launch further attacks. It’s a recipe for chaos in any connected environment! Change the default password immediately and ensure that any default credentials are removed from all devices during setup. Consider implementing additional security measures, such as network segmentation, to limit exposure. You've got this! By taking these steps, you can keep your network secure and your devices safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19341 · 97.3th percentile
Published
2021-02-10T18:35Z
EPSS history
Timeline
  • 10 FEB 18:35Z
    An issue was discovered on FiberHome HG6245D devices through RP2613
    cvelistv5