Hardcoded Credential Vulnerability in FiberHome HG6245D Devices

CVE-2021-27158

Summary

FiberHome HG6245D devices are exposed to a security vulnerability due to the presence of hardcoded credentials in the web daemon. Specifically, the credentials 'L1vt1m4eng' and '888888' can be leveraged by malicious actors to gain unauthorized access. This vulnerability arises from a lack of proper security controls that could prevent the disclosure of sensitive information, potentially compromising the integrity of the device and the broader network it supports.

References