CVE-2021-41946: Fiberhome HG150-Ub Firmware

Medium severity, CVSS 5.4. EPSS: 2.5% chance of exploitation in the next 30 days.

In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS.

Affected products

• Fiberhome HG150-Ub Firmware: version 3.0 only

Published 2022-05-18. Last modified 2026-06-17.