FiberHome HG6245D Router Vulnerability Analysis: Hardcoded Credentials, Backdoor, Info Disclosure

Key Vulnerability Information Summary Product Description Product Name: FiberHome HG6245D Router Firmware Version: RP2602 Release Date: 2021-01-12 Firmware Update: 2019-04-04 (RP2631) Vulnerability Overview CVE ID: No assigned CVE ID Affected Versions: HG6245D (RP2602), RP2631 Affected Devices: May affect other FiberHome devices (AN5506-04-FA, AN5506-04-FAT, AN5506-04-F) Vulnerability Details 1. Insecure IPv6 Connection - Lacks IPv6 firewall rules, allowing full access to internal management interface. 2. HTTP Server - Plaintext Passwords in Logs - HTTP logs store passwords and authentication cookies in plaintext. 3. HTTP Server - Hardcoded SSL Certificate - Network management uses a hardcoded private key with 777 permissions. 4. HTTP Server - Pre-Authentication Information Disclosure - Device information can be extracted by disabling JavaScript and accessing . 5. HTTP Server - CLI Telnet Backdoor - An HTTP API backdoor exists, allowing access to Telnet server without authentication. 6. HTTP Server - Hardcoded Credentials - Web backend contains hardcoded credentials usable for CLI Telnet access. 7. HTTP Server - Credential Encryption Algorithm - Weak encryption algorithm allows decryption and encryption of credentials. Summary This document details multiple security vulnerabilities in the FiberHome HG6245D router, including insecure IPv6 connections, hardcoded credentials, plaintext password storage, and pre-authentication information disclosure. Due to the presence of multiple critical vulnerabilities, users are strongly advised to upgrade firmware promptly or implement appropriate security measures to prevent potential attacks.

Goal Reached Thanks to every supporter — we hit 100%!

FiberHome HG6245D Router Vulnerability Analysis: Hardcoded Credentials, Backdoor, Info Disclosure