CVEvulnerability

CVE-2021-27156

9.8 CRITICAL Published 2021-02-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-798

Description

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface.

Affected configurations

• fiberhome hg6245d firmware (<= rp2613)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References