Priority MEDIUM 52
FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service ('webs') fails to enforce maximum lengths for Cookie header value…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02177 · Published 2025-11-12 · Fixed in RP2602 CWE-121
Priority MEDIUM 52
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01326 · Published 2025-11-12 · No fix listed CWE-284
Priority LOW 34
A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.07717 · Published 2025-02-24 · No fix listed CWE-77
Priority LOW 23
A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00609 · Published 2025-02-24 · No fix listed CWE-79
Priority LOW 23
A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00775 · Published 2025-02-24 · No fix listed CWE-79
Priority LOW 23
A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00775 · Published 2025-02-24 · No fix listed CWE-79
Priority LOW 30
A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg_lo…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.03116 · Published 2022-09-15 · No fix listed CWE-79
Priority LOW 37
In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02327 · Published 2022-08-29 · No fix listed CWE-319
Priority LOW 30
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.02984 · Published 2022-05-18 · No fix listed CWE-79
Priority MEDIUM 50
FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.10085 · Published 2021-12-16 · No fix listed CWE-78
Priority MEDIUM 49
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16394 · Published 2021-02-10 · No fix listed
Priority MEDIUM 51
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.19078 · Published 2021-02-10 · No fix listed CWE-312
Priority MEDIUM 58
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15983 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 49
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.15928 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 59
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16172 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 62
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.21634 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 63
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23897 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 61
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20528 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 59
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17335 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 63
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23897 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 63
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23897 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 61
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20009 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 62
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23303 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 62
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23303 · Published 2021-02-10 · No fix listed CWE-798
Priority MEDIUM 61
An issue was discovered on FiberHome HG6245D devices through RP2613.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20528 · Published 2021-02-10 · No fix listed CWE-798
Load more
THREATIST.IORead the docs