CVE-2021-27141

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613

Description: An issue was discovered where credentials in /fhconf/umconfig.txt are obfuscated via XOR with a hardcoded key. The webs binary contains details on how XOR is used for obfuscation.

Recommendations: For FiberHome HG6245D devices through RP2613, consider restricting access to the /fhconf/umconfig.txt file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.