CVE-2021-27170

9.8 criticalEPSS 16%

Critical (9.8) in fiberhome hg6245d firmware. EPSS 16% chance of exploitation in the next 30 days.

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-922
Published: 2021-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fiberhome:hg6245d_firmware

References

https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6
https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6

Check your stack JSON