Credential Exposure in FiberHome HG6245D Devices from FiberHome
CVE-2021-27153

9.8CRITICAL

Key Information:

Vendor
Fiberhome
Status
Hg6245d Firmware
Vendor
CVE Published:
10 February 2021

Summary

An identified security concern in FiberHome HG6245D devices exposes hardcoded credentials (trueadmin/admintrue) within the web daemon, posing a significant risk of unauthorized access by malicious actors. These credentials are not modifiable by users, thus increasing the potential for exploitation. Organizations utilizing these devices should be aware of this issue and consider implementing additional security measures to safeguard their networks.

References

https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-27153 : Credential Exposure in FiberHome HG6245D Devices from FiberHome | SecurityVulnerability.io