CVE-2021-27173

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613

Description: An issue was discovered in FiberHome HG6245D devices, where a backdoor API is provided by the HTTP server without authentication. The API endpoint "telnet?enable=0&key=calculated(BR0 MAC)" allows an attacker to remove firewall rules and reach the telnet server, which is used for the Command Line Interface (CLI).

Recommendations: For FiberHome HG6245D devices through RP2613, consider disabling the telnet server or restricting access to it until a patch is available. Additionally, avoid using the "telnet?enable=0&key=calculated(BR0 MAC)" API endpoint to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.