CVE-2021-27176

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*

History

12 Feb 2021, 00:06

Type Values Removed Values Added
CWE CWE-312
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
References (MISC) https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-filesĀ - (MISC) https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-filesĀ - Exploit, Third Party Advisory
CPE cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*

10 Feb 2021, 19:57

Type Values Removed Values Added
New CVE

Information

Published : 2021-02-10 19:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-27176

Mitre link : CVE-2021-27176

CVE.ORG link : CVE-2021-27176


JSON object : View

Products Affected

fiberhome

  • hg6245d
  • hg6245d_firmware
CWE
CWE-312

Cleartext Storage of Sensitive Information