high7.5
CVE-2021-27173
An issue was discovered on FiberHome HG6245D devices through RP2613.
Impact
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fiberhome | Hg6245d Firmware | through rp2613 |