CVE-2021-27140

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613

Description: An issue was discovered where passwords and authentication cookies are stored in cleartext in the web.log HTTP logs. This allows for the potential retrieval of sensitive information.

Recommendations: For FiberHome HG6245D versions through RP2613, consider restricting access to the web.log file to minimize the risk of exploitation. As a temporary workaround, disable the storage of sensitive information in the HTTP logs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.