PT-2021-17273
CVE-2021-27154
·
Published
2021-02-10
·
Updated
2021-02-11
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
FiberHome HG6245D versions through RP2613
Description:
An issue was discovered in the web daemon of the affected devices, where hardcoded admin credentials are present, specifically the username 'admin' and password 'G0R2U1P2ag', which are used by an ISP.
Recommendations:
For FiberHome HG6245D versions through RP2613, consider changing the hardcoded admin credentials to secure ones as a temporary workaround, and await further guidance from the manufacturer for a permanent fix.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾