PT-2021-17285

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered on FiberHome HG6245D devices. The password for the enable command is gpon. Recommendations: For FiberHome HG6245D versions through RP2613, consider changing the...

PT-2021-17288

Name of the Vulnerable Software and Affected Versions: FiberHome AN5506-04-FA devices with firmware RP2631 Description: An issue was discovered on FiberHome AN5506-04-FA devices. There is a gepon password for the gepon account. Recommendations: For FiberHome AN5506-04-FA devices with firmware...

PT-2021-17271

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where the hardcoded credentials awnfibre / fibre@dm!n are used for an ISP. Recommendations: For FiberHome HG6245D versio...

PT-2021-17281

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon contains hardcoded user credentials, specifically tattoo@home, for an ISP. Recommendations: For FiberHome HG6245D versions through RP2613,...

PT-2021-17269

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where hardcoded credentials gestiontelebucaramanga / t3l3buc4r4m4ng42013 are used for an ISP. Recommendations: For...

PT-2021-17276

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon contains hardcoded admin credentials, specifically admin / 888888, for an ISP. Recommendations: For FiberHome HG6245D versions through RP2613,...

PT-2021-17293

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where the wifi custom.cfg file contains cleartext passwords and has 0644 permissions, which could potentially expose sensitive information. Recommendations: For...

PT-2021-17262

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon contains hardcoded user / user1234 credentials for an ISP. Recommendations: For FiberHome HG6245D versions through RP2613, consider changing t...

PT-2021-17294

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where the wifictl 2g.cfg file contains cleartext passwords and has 0644 permissions, indicating a potential security risk. Recommendations: For FiberHome HG6245D...

PT-2021-17296

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered that allows bypassing authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server. Recommendations: For FiberHome HG624...

PT-2021-17298

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, allowing the telnet daemon to be crashed by sending a certain string, specifically 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a. Recommendation...

PT-2021-17258

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue allows information extraction from the device without authentication by disabling JavaScript and visiting the "/info.asp" API endpoint. Recommendations: For FiberHome HG6245D...

PT-2021-17275

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon on the affected devices contains credentials for an ISP that are equal to the last part of the MAC address of the br0 interface...

PT-2021-17284

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where the telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials. Recommendations: For FiberHome HG6245D devices through RP2613, consider disabli...

PT-2021-17289

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where FiberHome HG6245D devices have no firewall rules for IPv6 connectivity by default, exposing the internal management interfaces to the Internet...

PT-2021-17270

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon on the affected devices contains hardcoded rootmet / m3tr0r00t credentials for an ISP. Recommendations: For FiberHome HG6245D versions through...

FiberHome HG6245D devices 加密问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. The FiberHome HG6245D suffers from a password plaintext storage vulnerability. An attacker can exploit this vulnerability to obtain passwords in plaintext...

FiberHome HG6245D devices 输入验证错误漏洞

The HG6245D is an FTTH ONT router from FiberHome. A denial of service vulnerability exists in the FiberHome HG6245D. An attacker can exploit the vulnerability by sending a specific string to cause the telnet daemon to crash...

FiberHome HG6245D devices 信任管理问题漏洞

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

FiberHome HG6245D devices 默认配置问题漏洞

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A default configuration issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to gain access to the internal management interface...