CVE-2025-1613 FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URLfilterCfg of the component URL Filtering Submenu. The manipulation of the argument urlIP leads to cross site scripting. The attack...

FiberHome AN5506-01A 命令注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A command injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which originates from the Destination Address parameter of the Diagnosis component containing an operati...

FiberHome AN5506-01A 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A, which originates from a cross-site scripting issue in the urlIP parameter of the URL Filtering Submenu component in the...

FiberHome AN5506-01A 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which originates from a cross-site scripting issue in the pfDescription parameter of the Port Forwarding...

FiberHome AN5506-01A ONU GPON RP2511 代码注入漏洞

FiberHome AN5506-01A is a high-performance, low-power FTTH GPON optical network unit from China FiberHome. A code injection vulnerability exists in the FiberHome AN5506-01A ONU GPON RP2511, which stems from a cross-site scripting issue in the Description parameter of the NAT Submenu component...

PT-2025-7699 · Fiberhome · Fiberhome An5506-01A Onu Gpon Rp2511

Name of the Vulnerable Software and Affected Versions: FiberHome AN5506-01A ONU GPON RP2511 affected versions not specified Description: A critical issue has been found in the Diagnosis component of the affected software, where the manipulation of the Destination Address argument leads to os...

PT-2025-7678 · Fiberhome · Fiberhome An5506-01A Onu Gpon Rp2511

Name of the Vulnerable Software and Affected Versions: FiberHome AN5506-01A ONU GPON RP2511 affected versions not specified Description: The issue concerns a cross-site scripting problem related to the portForwardingCfg pf Description in the Port Forwarding Submenu. Recommendations: At the moment...

VulnCheck KEV: CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

PT-2024-34633 · Fiberhome · Fiberhome Hg6544C

Name of the Vulnerable Software and Affected Versions: FiberHome HG6544C version RP2743 Description: The issue allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List, which is not properly sanitized. This is a Cross Site Scripting vulnerability. Recommendations:...

FiberHome HG6544C 安全漏洞

The FiberHome HG6544C is a router from China's FiberHome that is equipped with an indicator light and an Ethernet LAN interface. A security vulnerability exists in the FiberHome HG6544C RP2743 version, which stems from a cross-site scripting vulnerability that allows an attacker to execute...

CVE-2024-51432

The CVE-2024-51432 entry concerns FiberHome HG6544C RP2743, where the SSID field in the WIFI Clients List is not properly sanitized, enabling Cross Site Scripting that can lead to arbitrary code execution. Affected component: SSID handling in the WIFI Clients List on FiberHome HG6544C RP2743. Roo...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

CVE-2024-51432

Cross Site Scripting vulnerability in FiberHome HG6544C RP2743 allows an attacker to execute arbitrary code via the SSID field in the WIFI Clients List not being sanitized...

SUSE CVE-2017-14147

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://Default-Router-IP/restoreinfo.cgi & execute it. Due to improper authentication on this page,...

CVE-2022-38814

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...

CVE-2022-38814

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...

CVE-2022-38814

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...

CVE-2022-38814

A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...