CVE-2021-27141

An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. (The webs binary has details on how XOR is used.)

• CWE-798

• https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-decryption-algorithmExploit, Third Party Advisory
• https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-decryption-algorithmExploit, Third Party Advisory

Published

Feb 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27132SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF inject…9.8
• CVE-2021-27135xterm before Patch #366 allows remote attackers to execute a…9.8
• CVE-2021-27137An issue was discovered in router/upnp/src/ssdp.c in DD-WRT …8.1
• CVE-2021-27138The boot loader in Das U-Boot before 2021.04-rc2 mishandles …7.8
• CVE-2021-27139An issue was discovered on FiberHome HG6245D devices through…7.5
• CVE-2021-27140An issue was discovered on FiberHome HG6245D devices through…7.5
• CVE-2021-27142An issue was discovered on FiberHome HG6245D devices through…7.5
• CVE-2021-27143An issue was discovered on FiberHome HG6245D devices through…9.8
• CVE-2021-27144An issue was discovered on FiberHome HG6245D devices through…9.8
• CVE-2021-27145An issue was discovered on FiberHome HG6245D devices through…9.8
• CVE-2021-27146An issue was discovered on FiberHome HG6245D devices through…9.8
• CVE-2021-27147An issue was discovered on FiberHome HG6245D devices through…9.8