Fiberhome

CVE-2025-63353 Nov 12, 16:15 CRITICAL POC Act Now

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2025-1616 Feb 24, 04:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2025-1615 Feb 24, 04:15 MEDIUM This Month

A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2025-1614 Feb 24, 03:15 MEDIUM This Month

A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2025-1613 Feb 24, 03:15 MEDIUM This Month

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2022-38814 Sep 15, 20:15 MEDIUM POC This Month

A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-36200 Aug 29, 15:15 HIGH POC This Week

In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-42912 Dec 16, 17:15 HIGH Act Now

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 13.8% and no vendor patch available.

CVE-2021-27179 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27178 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27177 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27176 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27175 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27174 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27173 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27172 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27171 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27170 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27169 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27168 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27167 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27166 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27165 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27164 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27163 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27162 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27161 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27160 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27159 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27158 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27157 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27156 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27155 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27154 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27153 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27152 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27151 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27150 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27149 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27148 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27147 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27146 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27145 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27144 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27143 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27142 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27141 Feb 10, 19:15 CRITICAL POC THREAT Act Now

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27140 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2021-27139 Feb 10, 19:15 HIGH POC THREAT This Week

An issue was discovered on FiberHome HG6245D devices through RP2613. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-17186 Oct 08, 19:15 HIGH POC This Week

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code execution. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-17187 Oct 08, 15:15 HIGH POC THREAT This Week

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2018-9249 Apr 04, 15:29 CRITICAL Act Now

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an unauthenticated request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2018-9248 Apr 04, 15:29 CRITICAL POC THREAT Act Now

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2017-15647 Oct 19, 22:29 HIGH POC THREAT Act Now

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 38.9%.

CVE-2017-14147 Sep 07, 14:29 CRITICAL POC THREAT Emergency

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 73.4%.

CVE-2017-5544 Jan 23, 07:59 MEDIUM This Month

An issue was discovered on FiberHome Fengine S5800 switches V210R240. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.