FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded adminpldt/z6dUABtl270qRxt7a2uGTiw credentials against an ISP. No detailed vulnerability details are provided a...

PT-2021-17261

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where the web management of the devices is done over HTTPS, using a hardcoded private key that has 0777 permissions. Recommendations: For FiberHome HG6245D devices...

PT-2021-17267

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where the hardcoded credentials telecomadmin / nE7jA%5m are used for an ISP. Recommendations: For FiberHome HG6245D...

CVE-2021-27177: Incorrect Authorization

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

CVE-2021-27175: Cleartext Storage of Sensitive Information

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl2g.cfg has cleartext passwords and 0644 permissions...

CVE-2021-27150: Use of Hard-coded Credentials

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestiontelebucaramanga / t3l3buc4r4m4ng42013 credentials for an ISP...

CVE-2021-27153: Use of Hard-coded Credentials

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP...

PT-2021-17277

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where hardcoded credentials are present. The credentials L1vt1m4eng / 888888 are used for an ISP. Recommendations: For...

PT-2021-17286

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, where a password of four hexadecimal characters for the admin account is generated in init 3bb password in libci adaptation layer.so...

PT-2021-17295

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where the wifictl 5g.cfg file contains cleartext passwords and has 0644 permissions, indicating a potential security risk. Recommendations: For FiberHome HG6245D...

FiberHome HG6245D devices 默认配置问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A security vulnerability exists in wifictl5g.cfg in the FiberHome HG6245D. No details of the vulnerability are provided at this time...

PT-2021-17274

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where hardcoded admin credentials are present, specifically the username admin and the password 3UJUh2VemEfUtesEchEC2d2e...

CVE-2021-27176: Cleartext Storage of Sensitive Information

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl5g.cfg has cleartext passwords and 0644 permissions...

CVE-2021-27174: Cleartext Storage of Sensitive Information

An issue was discovered on FiberHome HG6245D devices through RP2613. wificustom.cfg has cleartext passwords and 0644 permissions...

PT-2021-17278

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where the hardcoded credentials useradmin / 888888 are used for an ISP. Recommendations: For FiberHome HG6245D versions...

PT-2021-17297

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered where some passwords are stored in cleartext in nvram. Recommendations: For FiberHome HG6245D devices through RP2613, consider changing passwords and restricting...

CVE-2021-27172: Use of Hard-coded Credentials

An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh...

PT-2021-17298

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, allowing the telnet daemon to be crashed by sending a certain string, specifically 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a. Recommendation...

PT-2021-17269

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where hardcoded credentials gestiontelebucaramanga / t3l3buc4r4m4ng42013 are used for an ISP. Recommendations: For...

PT-2021-17285

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered on FiberHome HG6245D devices. The password for the enable command is gpon. Recommendations: For FiberHome HG6245D versions through RP2613, consider changing the...