PT-2021-17289 · Fiberhome · Fiberhome Hg6245D

Pierre Kim · Published 2021-02-10 · Updated 2021-02-12 · CVE-2021-27170

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613

Description: An issue was discovered where FiberHome HG6245D devices have no firewall rules for IPv6 connectivity by default, exposing the internal management interfaces to the Internet.

Recommendations: For FiberHome HG6245D versions through RP2613, consider configuring firewall rules to restrict IPv6 connectivity and limit exposure of internal management interfaces to the Internet.

Exploit

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2021-27170

Affected Products

Fiberhome Hg6245D

References · 3

• 🔥 https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-27170 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27170 · Vendor Advisory