CVE-2021-27177

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

CVE-2021-27165

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27165

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27179

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string...

CVE-2021-27165

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27177

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

Authentication flaw

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

Code injection

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string...

Code injection

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

Authentication flaw

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

CVE-2021-27165

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials...

CVE-2021-27165

CVE-2021-27165 affects FiberHome HG6245D devices (RP2613) where the telnet daemon on port 23/tcp can be abused using gpon/gpon credentials. Public sources (NVD; Red Hat; CNVD; CVE listing) corroborate credential-based access risk impacting device management. No remediation details are provided in...

CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

CVE-2021-27173

The CVE-2021-27173 entry concerns FiberHome HG6245D devices (RP2613) with an unauthenticated HTTP backdoor API at telnet?enable=0&key=calculated(BR0_MAC) that can remove firewall rules and expose the telnet CLI. Connected sources (Red Hat, CNVD, CVERecord, etc.) confirm the presence of a backdoor...

CVE-2021-27177

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server...

CVE-2021-27179

CVE-2021-27179 affects FiberHome HG6245D ONT routers (RP2613) where the telnet daemon can be crashed by receiving a crafted string: 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a. Multiple sources (NVD, Red Hat, CNVD, CVE listing) confirm the issue; CVSS metrics in NVD show both base scores of 5.0 (CVSS2, M...

CVE-2021-27179

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string...

FiberHome HG6245D devices 授权问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. An authentication bypass vulnerability exists in the FiberHome HG6245D. An attacker can exploit this vulnerability to bypass authentication by sending a decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to a telnet server...