CVE-2021-27173

High · 7.5

CVSS

7.5

EPSS

12.7%

Published

Feb 10, 2021

CISA due date

—

The record

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI).

Affected packages

Ecosystem	Package	Introduced	Fixed