PT-2021-17292 · Fiberhome · Fiberhome Hg6245D

Pierre Kim · Published 2021-02-10 · Updated 2022-07-12 · CVE-2021-27173

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613

Description: An issue was discovered in FiberHome HG6245D devices, where a backdoor API is provided by the HTTP server without authentication. The API endpoint "telnet?enable=0&key=calculated(BR0 MAC)" allows an attacker to remove firewall rules and reach the telnet server, which is used for the Command Line Interface (CLI).

Recommendations: For FiberHome HG6245D devices through RP2613, consider disabling the telnet server or restricting access to it until a patch is available. Additionally, avoid using the "telnet?enable=0&key=calculated(BR0 MAC)" API endpoint to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-27173

Affected Products

Fiberhome Hg6245D

References · 4

• 🔥 https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak · Exploit
• https://osv.dev/vulnerability/CVE-2021-27173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27173 · Security Note
• https://t.me/cibsecurity/23387 · Telegram Post