VYPR
← All vendors
Vendor

Fiberhome

Products
35
CVEs
64
Across products
126
Status
Private

Products

35
View all 35 products →

Recent CVEs

64
View all 64 CVEs →
  • CVE-2017-14147CriSep 7, 2017
    Fiberhome
    AN1020-25
    risk 0.72cvss 9.8epss 0.66

    An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper…

  • CVE-2017-16887CriJan 12, 2018
    Fiberhome
    Mobile WIFI Device Model LM53Q1
    risk 0.70cvss 9.8epss 0.37

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

  • CVE-2017-16885CriJan 12, 2018
    Fiberhome
    LM53Q1 VH519R05C01S38
    risk 0.69cvss 9.8epss 0.33

    Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating. The information includes Version…

  • CVE-2018-9248CriApr 4, 2018
    Fiberhome
    VDSL2 Modem HG 150-UB
    risk 0.68cvss 9.8epss 0.15

    FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.

  • CVE-2021-27164CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP.

  • CVE-2021-27163CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP.

  • CVE-2021-27162CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.27

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP.

  • CVE-2021-27159CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP.

  • CVE-2021-27158CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng / 888888 credentials for an ISP.

  • CVE-2021-27152CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / fibre@dm!n credentials for an ISP.

  • CVE-2021-27151CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP.

  • CVE-2021-27149CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / z6dUABtl270qRxt7a2uGTiw credentials for an ISP.

  • CVE-2021-27148CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP.

  • CVE-2021-27145CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.66cvss 9.8epss 0.24

    An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP.

  • CVE-2021-27177CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.65cvss 9.8epss 0.20

    An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.

  • CVE-2021-27172CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.65cvss 9.8epss 0.20

    An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh.

  • CVE-2021-27171CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.65cvss 9.8epss 0.18

    An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell (or tshell).

  • CVE-2021-27170CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.65cvss 9.8epss 0.16

    An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet.

  • CVE-2021-27169CriFeb 10, 2021
    Fiberhome
    AN5506-04-FA
    risk 0.65cvss 9.8epss 0.20

    An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon account.

  • CVE-2021-27168CriFeb 10, 2021
    Fiberhome
    HG6245D
    risk 0.65cvss 9.8epss 0.20

    An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account.

View all 64 CVEs →