CVE Tools
Track your stack

Fiberhome

50 CVEs tracked since 2018. Since Jan 2018, none of them reached CISA KEV.

Fiberhome CVEs per month

Jan 2018 to Feb 2025. Point at a month, or focus the strip and use the arrow keys.
Fiberhome CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2018-0130
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-1020
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02410
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-0240

Products

The products that kept showing up in Fiberhome's monthly top three, with their CVEs summed over those months.

  1. HG6245D Firmware401 month
  2. AN5506-01A Onu Gpon41 month
  3. AN5506-01-A Firmware31 month
  4. LM53Q1 Firmware31 month
  5. HG2201T Firmware21 month
  6. AN5506-01A Firmware11 month
  7. AN5506-04-FA Firmware11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Fiberhome.

  1. CVE-2021-4464FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow—
  2. CVE-2025-63353A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwo...9.8
  3. CVE-2025-1616FiberHome AN5506-01A ONU GPON Diagnosis os command injection4.7
  4. CVE-2025-1615FiberHome AN5506-01A ONU GPON NAT Submenu cross site scripting2.4
  5. CVE-2025-1614FiberHome AN5506-01A ONU GPON Port Forwarding Submenu portForwardingCfg cross site scripting2.4
  6. CVE-2025-1613FiberHome AN5506-01A ONU GPON URL Filtering Submenu URL_filterCfg cross site scripting2.4
  7. CVE-2022-38814A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inj...5.4
  8. CVE-2022-36200In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.7.5
  9. CVE-2021-41946In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to th...5.4
  10. CVE-2021-42912FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the r...8.8
  11. CVE-2021-27139An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp.7.5
  12. CVE-2021-27140An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs.7.5
  13. CVE-2021-27141An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. ...9.8
  14. CVE-2021-27142An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions.7.5
  15. CVE-2021-27143An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1234 credentials for an ISP.9.8

The record

Peak rank
#16 in Feb 2021
Busiest month shown
Feb 2021, 41 CVEs
Months with a KEV entry
0 since Jan 2018
Monthly snapshots
4 since 2018
Fiberhome's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store