CVE-2021-27156

9.8 criticalEPSS 15%

Critical (9.8) in fiberhome hg6245d firmware. EPSS 15% chance of exploitation in the next 30 days.

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2021-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fiberhome:hg6245d_firmware

References

https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials

Check your stack JSON