Hardcoded credentials

2021-02-1019:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.824 High

EPSS

Percentile

98.4%

JSON

An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh.

CPENameOperatorVersion
hg6245d_firmwareeq<= rp2613

CPE	Name	Operator	Version
	hg6245d_firmware	eq	<= rp2613

References

pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html