Authentication flaw

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

Code injection

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string...

CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

Code injection

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

CVE-2021-27165

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27165

CVE-2021-27165 affects FiberHome HG6245D devices (RP2613) where the telnet daemon on port 23/tcp can be abused using gpon/gpon credentials. Public sources (NVD; Red Hat; CNVD; CVE listing) corroborate credential-based access risk impacting device management. No remediation details are provided in...

CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

CVE-2021-27173

The CVE-2021-27173 entry concerns FiberHome HG6245D devices (RP2613) with an unauthenticated HTTP backdoor API at telnet?enable=0&key=calculated(BR0_MAC) that can remove firewall rules and expose the telnet CLI. Connected sources (Red Hat, CNVD, CVERecord, etc.) confirm the presence of a backdoor...

CVE-2021-27177

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

CVE-2021-27179

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string...

CVE-2021-27179

CVE-2021-27179 affects FiberHome HG6245D ONT routers (RP2613) where the telnet daemon can be crashed by receiving a crafted string: 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a. Multiple sources (NVD, Red Hat, CNVD, CVE listing) confirm the issue; CVSS metrics in NVD show both base scores of 5.0 (CVSS2, M...

FiberHome HG6245D devices 授权问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. An authentication bypass vulnerability exists in the FiberHome HG6245D. An attacker can exploit this vulnerability to bypass authentication by sending a decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to a telnet server...

FiberHome HG6245D devices 安全漏洞

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

FiberHome HG6245D devices 输入验证错误漏洞

The HG6245D is an FTTH ONT router from FiberHome. A denial of service vulnerability exists in the FiberHome HG6245D. An attacker can exploit the vulnerability by sending a specific string to cause the telnet daemon to crash...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

A vulnerability has been identified in SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions V16 Update 3a, SIMATIC HMI KTP Mobile Panels All versions V16 Update 3a, SINAMICS GH150 All versions, SINAMICS GL150 with option X30 All versions, SINAMICS GM150 with option X30 All versions,...

CVE-2020-15798

CVE-2020-15798 affects Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS) and SIMATIC HMI KTP Mobile Panels, plus several SINAMICS models (GH150, GL150 X30, GM150 X30, SH150, SL150, SM120, SM150, SM150i). The vulnerability arises from the Telnet service not requiring authentication, allowing a rem...