CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

CVE-2021-27139

The CVE-2021-27139 entry concerns FiberHome HG6245D devices (RP2613): an information-disclosure flaw allowing extraction of device data without authentication by accessing /info.asp with JavaScript disabled. The vulnerability affects the device’s information interface and is classified by NVD wit...

CVE-2021-27139

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp...

CVE-2021-27140

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs...

CVE-2021-27140

FiberHome HG6245D devices (via RP2613) are affected by CVE-2021-27140: passwords and authentication cookies are stored in cleartext in web.log HTTP logs. The connected sources confirm the affected product and root cause (cleartext credential exposure in logs); exploitation details and specific re...

CVE-2021-27141

An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded j7aLyZ98sSd5HfSgGjMj8;Ss;d&^@$a2s0i3g key. The webs binary has details on how XOR is used...

CVE-2021-27141

CVE-2021-27141 affects FiberHome HG6245D devices (RP2613) where credentials stored in /fhconf/umconfig.txt are obfuscated with XOR using a hardcoded key. The Red Hat and NVD entries reproduce the same description, confirming the vulnerability stems from weak obfuscation rather than a cryptographi...

CVE-2021-27142

The CVE-2021-27142 entry concerns FiberHome HG6245D devices (RP2613). The issue is that the web management interface runs over HTTPS but uses a hardcoded private key with permissions 0777, exposed in the device’s web stack. This configuration enables potential disclosure or misuse of the private ...

CVE-2021-27142

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions...

CVE-2021-27143

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1234 credentials for an ISP...

CVE-2021-27143

The CVE-2021-27143 issue affects FiberHome HG6245D devices (RP2613) where the web daemon contains hardcoded credentials (user / user1234) for an ISP. This credential hardcoding represents a severe access control weakness visible in multiple records (NVD, CNVD, Red Hat advisory). Impact is describ...

CVE-2021-27144

CVE-2021-27144 affects FiberHome HG6245D devices (ONT router) via RP2613. The web daemon contains hardcoded credentials (e.g., f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u) used by an ISP, enabling unauthenticated access from the network. The incident is documented across multiple sources (NVD, CNVD...

CVE-2021-27144

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded fi!b@er$h%o^mesuperadmin / sfuh+g|u credentials for an ISP...

CVE-2021-27145

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP...

CVE-2021-27145

CVE-2021-27145 affects FiberHome HG6245D devices via RP2613. The web daemon contains hardcoded admin/lnadmin credentials, enabling potential unauthorized access. In the provided records, the affected device is a FiberHome HG6245D FTTH ONT router; root cause is hardcoded credentials in the web int...

CVE-2021-27146

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP...

CVE-2021-27146

The CVE-2021-27146 vulnerability affects FiberHome HG6245D devices (RP2613) where the web daemon contains hardcoded admin/CUadmin credentials, enabling unauthorized access over the network. Public sources (NVD entry) describe a high/critical impact with authentication bypass and partial confident...

CVE-2021-27147

The CVE-2021-27147 issue affects FiberHome HG6245D devices (RP2613) and is due to a web daemon that contains hardcoded admin/admin credentials, enabling potential unauthorized admin access. Public descriptions across Red Hat, CNVD, NVD, and CVE records corroborate a hardcoded-credential vulnerabi...

CVE-2021-27148

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP...

CVE-2021-27148

Summary of CVE-2021-27148 (FiberHome HG6245D): The vulnerability affects FiberHome HG6245D ONT routers/IGIN via RP2613, where the device web daemon embeds hardcoded credentials (telecomadmin / nE7jA%5m) used by an ISP. The provided documents confirm the affected component is the web daemon and th...