Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27095 State: PUBLISHED Published: 2021-04-13T19:32:45 Last Updated: 2024-08-03T20:40:47.303Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1
7, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Media Video Decoder Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.m
er Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27095
CVE ID: CVE-2021-27096 State: PUBLISHED Published: 2021-04-13T19:32:46 Last Updated: 2024-11-19T16:28:14.989Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1
7, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: NTFS Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27096
CVE ID: CVE-2021-27097 State: PUBLISHED Published: 2021-02-17T22:36:30.000Z Last Updated: 2025-11-03T18:07:58.736Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0 - https://github.com/u-boot/u-boot/commit/8a7d4cf9820ea16fabd25a6379351b4dc291204b - https://github.com/u-boot/u-boot/commit/6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01
CVE ID: CVE-2021-27098 State: PUBLISHED Published: 2021-03-05T16:59:06 Last Updated: 2024-08-03T20:40:47.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to distribute. Proper controls are in place to require that the caller presents a valid agent certificate that is already authorized to issue at least one SPIFFE ID, and the requested SPIFFE ID belongs to the same trust domain, prior to b
ady authorized to issue at least one SPIFFE ID, and the requested SPIFFE ID belongs to the same trust domain, prior to being able to trigger this vulnerability. This issue has been fixed in SPIRE versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spiffe/spire/security/advisories/GHSA-h746-rm5q-8mgq
CVE ID: CVE-2021-27099 State: PUBLISHED Published: 2021-03-05T17:04:20 Last Updated: 2024-08-03T20:40:47.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the "aws_iid" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary SPIFFE ID within the same trust domain, if the attacker controls the value of an EC2 tag prior to attestation, and the attestor is configured for agent ID templating where the tag value is the last element in the path. This issue has been fixed in SPIRE versions 0.11.3 and 0.12.1 Additional Analyst Notes: - CV
e last element in the path. This issue has been fixed in SPIRE versions 0.11.3 and 0.12.1 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spiffe/spire/security/advisories/GHSA-q7gm-mjrg-44h9
CVE ID: CVE-2021-27101 State: PUBLISHED Published: 2021-02-16T20:02:39.000Z Last Updated: 2025-10-21T23:35:26.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.accellion.com/products/fta/ - https://github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt
CVE ID: CVE-2021-27102 State: PUBLISHED Published: 2021-02-16T20:07:45.000Z Last Updated: 2025-10-21T23:35:25.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.accellion.com/products/fta/ - https://github.com/accellion/CVEs/blob/main/CVE-2021-27102.txt
CVE ID: CVE-2021-27103 State: PUBLISHED Published: 2021-02-16T20:12:12.000Z Last Updated: 2025-10-21T23:35:25.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.accellion.com/products/fta/ - https://github.com/accellion/CVEs/blob/main/CVE-2021-27103.txt
CVE ID: CVE-2021-27104 State: PUBLISHED Published: 2021-02-16T20:16:42.000Z Last Updated: 2025-10-21T23:25:54.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.accellion.com/products/fta/ - https://github.com/accellion/CVEs/blob/main/CVE-2021-27104.txt
CVE ID: CVE-2021-27112 State: PUBLISHED Published: 2021-04-15T15:05:42 Last Updated: 2024-08-03T20:40:47.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddy8/LightCMS/issues/19
CVE ID: CVE-2021-27113 State: PUBLISHED Published: 2021-04-14T13:53:39 Last Updated: 2024-08-03T20:40:47.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/GD008/vuln/blob/main/DIR-816_2.md
CVE ID: CVE-2021-27114 State: PUBLISHED Published: 2021-04-14T13:54:04 Last Updated: 2024-08-03T20:40:47.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/GD008/vuln/blob/main/DIR-816_stackoverflow.md
CVE ID: CVE-2021-27116 State: PUBLISHED Published: 2022-04-05T15:36:55 Last Updated: 2024-08-03T20:40:47.295Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in file profile.go in function MemProf in beego through 2.0.2, allows attackers to launch symlink attacks locally. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beego/beego/issues/4484
CVE ID: CVE-2021-27117 State: PUBLISHED Published: 2022-04-05T15:36:37 Last Updated: 2024-08-03T20:40:47.288Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in file profile.go in function GetCPUProfile in beego through 2.0.2, allows attackers to launch symlink attacks locally. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beego/beego/issues/4484
CVE ID: CVE-2021-27124 State: PUBLISHED Published: 2021-02-18T03:06:44 Last Updated: 2024-08-03T20:40:47.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/161342/Doctor-Appointment-System-1.0-SQL-Injection.html - https://www.sourcecodester.com/php/14182/doctor-appointment-system.html - https://naku-ratti.medium.com/doctor-appointment-system-1-0-authenticated-sql-dios-7689b1d30f5f
CVE ID: CVE-2021-27129 State: PUBLISHED Published: 2021-04-15T11:15:34.000Z Last Updated: 2025-11-11T17:37:07.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161080/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/49470
CVE ID: CVE-2021-27130 State: PUBLISHED Published: 2021-04-14T14:59:13 Last Updated: 2024-08-03T20:40:47.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161219/Online-Reviewer-System-1.0-SQL-Injection-Shell-Upload.html
CVE ID: CVE-2021-27131 State: PUBLISHED Published: 2023-05-16T00:00:00 Last Updated: 2024-08-03T20:40:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the "Additional HTML Section" via "Header and Footer" parameter in /admin/settings.php. This vulnerability is leading an attacker to steal admin and all user account cookies by storing the malicious XSS payload in Header and Footer. NOTE: this is disputed by the vendor because the "Additional HTML Section" for "Header and Footer" can only be supplied by an administrator, who is intentionally allowed to enter u
HTML Section" for "Header and Footer" can only be supplied by an administrator, who is intentionally allowed to enter unsanitized input (e.g., site-specific JavaScript). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moodle/moodle - https://github.com/p4nk4jv/CVEs-Assigned/blob/master/Moodle-3.10.1-CVE-2021-27131.md - https://docs.moodle.org/402/en/Risks
CVE ID: CVE-2021-27132 State: PUBLISHED Published: 2021-02-27T05:01:02 Last Updated: 2024-08-03T20:40:47.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header. Additional Analyst Notes: - CVE Program Container: References: - http://sercomm.com - https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132
CVE ID: CVE-2021-27135 State: PUBLISHED Published: 2021-02-10T15:51:16 Last Updated: 2024-08-03T20:40:47.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/02/09/7 - https://www.openwall.com/lists/oss-security/2021/02/09/9 - http://www.openwall.com/lists/oss-security/2021/02/10/7 - https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html - https://lists.fedoraproject.org/archives/list/p
7 - https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S/ - https://news.ycombinator.com/item?id=26524650 - https://access.redhat.com/security/cve/CVE-2021-27135 - https://bugzilla.redhat.com/show_bug.cgi?id=1927559 - https://invisible-island.net/xterm/xterm.log.html - https://github.com/ThomasDickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c - https://bugzilla.suse.com/show_bug.cgi?id=1182091 - http://seclists.org/fulldisclosure/2021/May/52 - https://security.gentoo.org/glsa/202208-22
CVE ID: CVE-2021-27138 State: PUBLISHED Published: 2021-02-17T22:36:52.000Z Last Updated: 2025-11-03T18:07:59.724Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0 - https://github.com/u-boot/u-boot/commit/3f04db891a353f4b127ed57279279f851c6b4917 - https://github.com/u-boot/u-boot/commit/79af75f7776fc20b0d7eb6afe1e27c00fdb4b9b4
CVE ID: CVE-2021-27139 State: PUBLISHED Published: 2021-02-10T18:41:19 Last Updated: 2024-08-03T20:40:47.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak
CVE ID: CVE-2021-27140 State: PUBLISHED Published: 2021-02-10T18:41:08 Last Updated: 2024-08-03T20:40:47.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-passwords-logs
CVE ID: CVE-2021-27141 State: PUBLISHED Published: 2021-02-10T18:40:55 Last Updated: 2024-08-03T20:40:47.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. (The webs binary has details on how XOR is used.) Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-decryption-algorithm
CVE ID: CVE-2021-27142 State: PUBLISHED Published: 2021-02-10T18:40:42 Last Updated: 2024-08-03T20:40:47.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-ssl-certificates
CVE ID: CVE-2021-27143 State: PUBLISHED Published: 2021-02-10T18:40:31 Last Updated: 2024-08-03T20:40:47.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1234 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27144 State: PUBLISHED Published: 2021-02-10T18:40:22 Last Updated: 2024-08-03T20:40:47.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27145 State: PUBLISHED Published: 2021-02-10T18:40:07 Last Updated: 2024-08-03T20:40:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27146 State: PUBLISHED Published: 2021-02-10T18:40:00 Last Updated: 2024-08-03T20:40:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27147 State: PUBLISHED Published: 2021-02-10T18:39:51 Last Updated: 2024-08-03T20:40:47.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admin credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27148 State: PUBLISHED Published: 2021-02-10T18:39:43 Last Updated: 2024-08-03T20:40:47.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27149 State: PUBLISHED Published: 2021-02-10T18:39:36 Last Updated: 2024-08-03T20:40:47.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / z6dUABtl270qRxt7a2uGTiw credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27150 State: PUBLISHED Published: 2021-02-10T18:39:26 Last Updated: 2024-08-03T20:40:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestiontelebucaramanga / t3l3buc4r4m4ng42013 credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27151 State: PUBLISHED Published: 2021-02-10T18:39:02 Last Updated: 2024-08-03T20:40:47.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27152 State: PUBLISHED Published: 2021-02-10T18:38:51 Last Updated: 2024-08-03T20:40:47.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / fibre@dm!n credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27153 State: PUBLISHED Published: 2021-02-10T18:38:42 Last Updated: 2024-08-03T20:40:47.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27154 State: PUBLISHED Published: 2021-02-10T18:38:22 Last Updated: 2024-08-03T20:40:47.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2U1P2ag credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials
CVE ID: CVE-2021-27155 State: PUBLISHED Published: 2021-02-10T18:38:14 Last Updated: 2024-08-03T20:40:47.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh2VemEfUtesEchEC2d2e credentials for an ISP. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials