CVE-2019-17186

HIGH

FiberHome HG2201T 1.00.M5007_JS_201804 - Unauthenticated Remote Code Execution via telnet.cgi

Title source: llm

/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code execution.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 8.8

EPSS 0.0587

EPSS Percentile 92.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-306

Status published

Products (1)

fiberhome/hg2201t_firmware hg2201t_1.00.m5007_js_201804

Published Oct 08, 2019

Tracked Since Feb 18, 2026