fiberhome Vulnerability Advisory Catalog

Total 60 security vulnerabilities recorded for fiberhome software and firmware.

← Back to All Vendors
CVE-2025-63353 CRITICAL
Component: hg6145f1_firmware

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted fro...

📅 2025-11-12
CVSS 9.8 Dossier →
CVE-2025-1616 MEDIUM
Component: an5506-01a_firmware

A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown func...

📅 2025-02-24
CVSS 4.7 Dossier →
Component: an5506-01-a_firmware

A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionalit...

📅 2025-02-24
CVSS 2.4 Dossier →
Component: an5506-01-a_firmware

A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/...

📅 2025-02-24
CVSS 2.4 Dossier →
Component: an5506-01-a_firmware

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the...

📅 2025-02-24
CVSS 2.4 Dossier →
Component: an5506-02-b_firmware

A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrar...

📅 2022-09-15
CVSS 5.4 Dossier →
Component: hg150-ub_firmware

In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed....

📅 2022-08-29
CVSS 7.5 Dossier →
Component: hg150-ub_firmware

In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username...

📅 2022-05-18
CVSS 5.4 Dossier →
Component: an5506-01-a_firmware

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to...

📅 2021-12-16
CVSS 8.8 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c ...

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram....

📅 2021-02-10
CVSS 7.5 Dossier →
CVE-2021-27177 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZ...

📅 2021-02-10
CVSS 9.8 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions....

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions....

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions....

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authenti...

📅 2021-02-10
CVSS 7.5 Dossier →
CVE-2021-27172 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.s...

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27171 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI i...

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27170 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the inter...

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27169 CRITICAL
Component: an5506-04-fa_firmware

An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon account....

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27168 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account....

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27167 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These c...

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27166 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon....

📅 2021-02-10
CVSS 9.8 Dossier →
CVE-2021-27165 CRITICAL
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials....

📅 2021-02-10
CVSS 9.8 Dossier →
Page 1 of 3 (60 Total Records)