CVE-2021-27179

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*

History

12 Feb 2021, 00:26

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CPE cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*
CWE CWE-20
References (MISC) https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-dosĀ - (MISC) https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-dosĀ - Exploit, Third Party Advisory

10 Feb 2021, 19:57

Type Values Removed Values Added
New CVE

Information

Published : 2021-02-10 19:15

Updated : 2023-12-10 13:41


NVD link : CVE-2021-27179

Mitre link : CVE-2021-27179

CVE.ORG link : CVE-2021-27179


JSON object : View

Products Affected

fiberhome

  • hg6245d_firmware
  • hg6245d
CWE
CWE-20

Improper Input Validation