Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
40 results
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27179 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27178 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27177 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27176 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27175 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27174 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27173 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27172 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27171 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell (or tshell).
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27170 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27168 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27167 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init_3bb_password in libci_adaptation_layer.so.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27166 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27165 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27164 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27163 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27162 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27161 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27160 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27159 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27158 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng / 888888 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27157 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 888888 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27156 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27155 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh2VemEfUtesEchEC2d2e credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27154 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2U1P2ag credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27153 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27152 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / fibre@dm!n credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27151 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27150 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestiontelebucaramanga / t3l3buc4r4m4ng42013 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27149 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / z6dUABtl270qRxt7a2uGTiw credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27148 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27147 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admin credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27146 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27145 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27144 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27143 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1234 credentials for an ISP.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27142 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27141 · Other software · Fiberhome · reported by MITRECritical 9.8
An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. (The webs binary has details on how XOR is used.)
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27140 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Feb 10, 2021An issue was discovered on FiberHome HG6245D devices through RP2613.CVE-2021-27139 · Other software · Fiberhome · reported by MITREHigh 7.5
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp.
- Product
- Hg6245d Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpierrekim.github.iopierrekim.github.io
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.