CVE-2021-27177

9.8 criticalEPSS 20%

Critical (9.8) in fiberhome hg6245d firmware. EPSS 20% chance of exploitation in the next 30 days.

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2021-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fiberhome:hg6245d_firmware

References

https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-auth-bypass
https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-auth-bypass

Check your stack JSON