Show filters
40 Total Results
Displaying 21-30 of 40
Sort by:
Attacker Value
Unknown

CVE-2021-27170

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet.
Attacker Value
Unknown

CVE-2021-27151

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27145

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27144

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27159

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27160

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27153

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27173

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).
Attacker Value
Unknown

CVE-2021-27146

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP.
Attacker Value
Unknown

CVE-2021-27162

Disclosure Date: February 10, 2021 (last updated February 22, 2025)
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP.