Hardcoded credentials

2021-02-1019:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

JSON

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions.

CPENameOperatorVersion
hg6245d_firmwareeq<= rp2613

CPE	Name	Operator	Version
	hg6245d_firmware	eq	<= rp2613

References

pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html