fiberhome Vulnerability Advisory Catalog

Total 60 security vulnerabilities recorded for fiberhome software and firmware.

← Back to All Vendors
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext i...

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg6245d_firmware

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by d...

📅 2021-02-10
CVSS 7.5 Dossier →
Component: hg2201t_firmware

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code execution....

📅 2019-10-08
CVSS 8.8 Dossier →
Component: hg2201t_firmware

/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbi...

📅 2019-10-08
CVSS 7.5 Dossier →
CVE-2018-9249 CRITICAL
Component: vdsl2_modem_hg_150-ub_firmware

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an...

📅 2018-04-04
CVSS 9.8 Dossier →
CVE-2018-9248 CRITICAL
Component: vdsl2_modem_hg_150-ub_firmware

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header....

📅 2018-04-04
CVSS 9.8 Dossier →
CVE-2017-16887 CRITICAL
Component: lm53q1_firmware

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized...

📅 2018-01-12
CVSS 9.8 Dossier →
Component: lm53q1_firmware

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized...

📅 2018-01-12
CVSS 8.8 Dossier →
CVE-2017-16885 CRITICAL
Component: lm53q1_firmware

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Chang...

📅 2018-01-12
CVSS 9.8 Dossier →
Component: routerfiberhome_firmware

On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value....

📅 2017-10-19
CVSS 7.5 Dossier →
CVE-2017-14147 CRITICAL
Component: adsl_an1020-25_firmware

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its f...

📅 2017-09-07
CVSS 9.8 Dossier →
CVE-2017-5544 MEDIUM
Component: fengine_s5800_firmware

An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password c...

📅 2017-01-23
CVSS 5.9 Dossier →
Page 3 of 3 (60 Total Records)