CVE-2021-27174

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613

Description: An issue was discovered where the wifi custom.cfg file contains cleartext passwords and has 0644 permissions, which could potentially expose sensitive information.

Recommendations: For FiberHome HG6245D devices through RP2613, consider restricting access to the wifi custom.cfg file to minimize the risk of exploitation. As a temporary workaround, changing the permissions of the wifi custom.cfg file to more restrictive settings, such as 0640 or 0600, could help mitigate the issue until a more permanent fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.