56
CVEs
36
Critical
14
High
0
KEV
49
PoC
50
Unpatched C/H
0.0%
Patch Rate
17.3%
Avg EPSS
Severity Breakdown
CRITICAL
36
HIGH
14
MEDIUM
6
LOW
0
Monthly CVE Trend
Affected Products (16)
Hg6245D Firmware
40
An5506 01 A Firmware
4
An5506 02 B Firmware
2
Hg2201T Firmware
2
Vdsl2 Modem Hg 150 Ub Firmware
2
Routerfiberhome Firmware
1
An5506 04 F Firmware
1
Fengine S5800 Firmware
1
An5506 01A Firmware
1
An5506 01 B Firmware
1
An5506 04 Fa Firmware
1
Hg150 Ub Firmware
1
An5506 04 B Firmware
1
Adsl An1020 25 Firmware
1
Aan5506 04 G2G Firmware
1
Hg6145F1 Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2017-14147 | An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 73.4%. | CRITICAL | 9.8 | 73.4% | 142 |
PoC
No patch
|
| CVE-2017-15647 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 38.9%. | HIGH | 7.5 | 38.9% | 96 |
PoC
No patch
|
| CVE-2018-9248 | FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 15.3% | 69 |
PoC
No patch
|
| CVE-2021-27141 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 15.8% | 69 |
PoC
No patch
|
| CVE-2021-27143 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 16.0% | 69 |
PoC
No patch
|
| CVE-2021-27144 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 21.9% | 69 |
PoC
No patch
|
| CVE-2021-27145 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 23.6% | 69 |
PoC
No patch
|
| CVE-2021-27146 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 20.5% | 69 |
PoC
No patch
|
| CVE-2021-27147 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 17.1% | 69 |
PoC
No patch
|
| CVE-2021-27148 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 23.6% | 69 |
PoC
No patch
|
| CVE-2021-27149 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 23.6% | 69 |
PoC
No patch
|
| CVE-2021-27150 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 20.5% | 69 |
PoC
No patch
|
| CVE-2021-27151 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 23.6% | 69 |
PoC
No patch
|
| CVE-2021-27152 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 23.6% | 69 |
PoC
No patch
|
| CVE-2021-27153 | An issue was discovered on FiberHome HG6245D devices through RP2613. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 20.5% | 69 |
PoC
No patch
|