610 matches found
CVE-2021-27166
CVE-2021-27166 affects FiberHome HG6245D devices (RP2613) and is described as a trust management issue that can be exploited via default/hard-coded credentials (e.g., enable password set to “gpon”). Several connected sources indicate credential-related weaknesses, including hard-coded/default pas...
CVE-2021-27166
An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon...
CVE-2021-27167
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init3bbpassword in libciadaptationlayer.so...
CVE-2021-27167
This CVE affects FiberHome HG6245D devices (RP2613) where the admin account is protected by a password consisting of four hexadecimal characters generated in init_3bb_password within libci_adaptation_layer.so. The vulnerability is documented with administrative credentials that can be discovered ...
CVE-2021-27168
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account...
CVE-2021-27168
CVE-2021-27168 affects FiberHome HG6245D devices via RP2613, where the rdsadmin account is exposed with a hardcoded password (6GFJdY4aAuUKJjdtSn7d). The issue enables potential unauthorized admin access over the network, with CVSS metrics indicating high confidentiality, integrity, and availabili...
CVE-2021-27169
CVE-2021-27169 affects FiberHome AN5506-04-FA devices with firmware RP2631. The connected Red Hat and CVE records describe a gepon password for the gepon account, indicating the presence of credentials-related weakness. There are no concrete root-cause details or official patches in the provided ...
CVE-2021-27169
An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon account...
CVE-2021-27170
Technical details about CVE-2021-27170 are not publicly provided in the connected documents. Monitor for updates.
CVE-2021-27170
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet...
CVE-2021-27171
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...
CVE-2021-27171
The CVE-2021-27171 issue affects FiberHome HG6245D devices through RP2613. It allows starting a Linux telnetd as root on port 26/tcp by issuing CLI commands (ddd and shell/tshell), enabling complete control per the connected sources. Root-level access is the stated impact; no explicit exploitatio...
CVE-2021-27172
An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh...
CVE-2021-27172
The CVE-2021-27172 case concerns FiberHome HG6245D ONT routers (via RP2613). It relies on a hardcoded GEPON password for root stored in /etc/init.d/system-config.sh, enabling unauthorized root access. The NVD entry lists a CVSS3.1 base score of 9.8 (CRITICAL) with network attack vector and no aut...
CVE-2021-27173
The CVE-2021-27173 entry concerns FiberHome HG6245D devices (RP2613) with an unauthenticated HTTP backdoor API at telnet?enable=0&key=calculated(BR0_MAC) that can remove firewall rules and expose the telnet CLI. Connected sources (Red Hat, CNVD, CVERecord, etc.) confirm the presence of a backdoor...
CVE-2021-27173
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...
CVE-2021-27174
The CVE-2021-27174 case concerns FiberHome HG6245D devices (via RP2613). The underlying issue is that wifi_custom.cfg stores cleartext passwords and is accessible with 0644 file permissions, exposing credentials and creating a confidentiality risk. The connected Red Hat, CNVD, and CVE records cor...
CVE-2021-27174
An issue was discovered on FiberHome HG6245D devices through RP2613. wificustom.cfg has cleartext passwords and 0644 permissions...
CVE-2021-27175
The CVE-2021-27175 entry concerns FiberHome HG6245D devices (RP2613) where the wifictl_2g.cfg file stores credentials in cleartext and is set to 0644 permissions. This combination allows read access to sensitive credentials, representing a local or network-visible risk depending on access to the ...