CVE-2021-27162

CRITICAL EXPLOITED

FiberHome HG6245D Firmware < RP2613 - Use of Hard-coded Credentials

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-27162 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.2685
EPSS Percentile 97.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-04-29
CWE
CWE-798
Status published
Products (1)
fiberhome/hg6245d_firmware < rp2613
Published Feb 10, 2021
Tracked Since Feb 18, 2026