CVE-2021-27141: Fiberhome HG6245D Firmware

Critical severity, CVSS 9.8. EPSS: 15.8% chance of exploitation in the next 30 days.

An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. (The webs binary has details on how XOR is used.)

Affected products

• Fiberhome HG6245D Firmware: up to and including rp2613

Published 2021-02-10. Last modified 2026-06-17.