745 matches found
PT-2021-17290
Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, allowing an attacker to start a Linux telnetd as root on port 26/tcp. This can be achieved by using the CLI interface commands ddd an...
RCE vulnerability in FiberHome routers
Ltd., or FiberHome, is a listed company headquartered in Wuhan, China. FiberHome is a listed company in the telecommunications equipment manufacturing industry headquartered in Wuhan, China. A RCE vulnerability exists in FiberHome routers, which can be exploited by an attacker to execute arbitrar...
FiberHome HG6245D Disclosure / Bypass / Privilege Escalation / DoS
Hello, Please find a text-only version below sent to security mailing lists. The complete version on "Multiple vulnerabilities found in FiberHome HG6245D routers" is posted here: https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html === text-version of the advisory =...
Denial of Service Vulnerability in HG220GS-U
The business scope of Fiberhome Communication Technology Co., Ltd. includes fiber optic communication and related communication technology, information technology field, industrial Internet, and technology development in the field of Internet of Things. A denial of service vulnerability exists in...
Denial of Service Vulnerability in MIFON Smart Router R1
The business scope of Fiberhome Communication Technology Co., Ltd. includes fiber optic communication and related communication technology, information technology field, industrial Internet, and technology development in the field of Internet of Things. A denial of service vulnerability exists in...
Logic Flaw Vulnerability in the Fiber FR2600 Series Routers
Fengine FR2600 series integrated service access router hereinafter referred to as FR2600 is a new generation of switched access router platform built by Fiberhome using the industry's new hardware design architecture.FR2600 has powerful processing power and scalability, rich software functions an...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
Cross site scripting
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
CVE-2019-9556 affects FiberHome AN5506-04-F RP2669 devices. The vulnerability is a Cross-Site Scripting (XSS) issue in the web management interface, arising from insufficient input filtering in the application (stored XSS). Exploitation is discussed in public advisories and exploits (e.g., Exploi...
PT-2019-19707
Name of the Vulnerable Software and Affected Versions FiberHome an5506-04-f RP2669 devices Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For FiberHome an5506-04-f RP2669 devices, at the moment, there is no information about a newer version that contains a...
CVE-2019-9556: Improper Neutralization of Input During Web Page Generation
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
Remote code execution
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
CVE-2019-17186 affects FiberHome HG2201T devices (firmware 1.00.M5007_JS_201804). The issue is pre-authentication remote code execution via /var/WEB-GUI/cgi-bin/telnet.cgi. Multiple sources (NVD, Red Hat, CVE lists) confirm the same description. The documents do not provide a patch version or rem...