CVE-2021-27140

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-02-10

Last modified

2024-08-03

Weaknesses

CWE-312

Affected products

• Hg6245d Firmware (Fiberhome)

References

• https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-passwords-logs