Authentication flaw

2021-02-1019:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.

CPENameOperatorVersion
hg6245d_firmwareeq<= rp2613

CPE	Name	Operator	Version
	hg6245d_firmware	eq	<= rp2613

References

pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html