Vulnerabilities > CVE-2021-27173 - Unspecified vulnerability in Fiberhome Hg6245D Firmware Rp2613

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
fiberhome

Summary

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).

Vulnerable Configurations

Part Description Count
OS
Fiberhome
1
Hardware
Fiberhome
1