CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2021-42912

Fiberhome » An5506-01-A » Version: N/A

cpe:2.3:h:fiberhome:an5506-01-a:-
Fiberhome » An5506-01-B » Version: N/A

cpe:2.3:h:fiberhome:an5506-01-b:-
Fiberhome » An5506-02-B » Version: N/A

cpe:2.3:h:fiberhome:an5506-02-b:-
Fiberhome » An5506-04-B » Version: N/A

cpe:2.3:h:fiberhome:an5506-04-b:-
Fiberhome » An5506-04-F » Version: N/A

cpe:2.3:h:fiberhome:an5506-04-f:-
Fiberhome » An5506-04-G2g » Version: N/A

cpe:2.3:h:fiberhome:an5506-04-g2g:-
Fiberhome » Aan5506-04-G2g Firmware » Version: rp2560

cpe:2.3:o:fiberhome:aan5506-04-g2g_firmware:rp2560
Fiberhome » An5506-01-A Firmware » Version: rp0509

cpe:2.3:o:fiberhome:an5506-01-a_firmware:rp0509
Fiberhome » An5506-01-B Firmware » Version: rp2610

cpe:2.3:o:fiberhome:an5506-01-b_firmware:rp2610
Fiberhome » An5506-02-B Firmware » Version: rp2520

cpe:2.3:o:fiberhome:an5506-02-b_firmware:rp2520
Fiberhome » An5506-02-B Firmware » Version: rp2521

cpe:2.3:o:fiberhome:an5506-02-b_firmware:rp2521
Fiberhome » An5506-02-B Firmware » Version: rp2603

cpe:2.3:o:fiberhome:an5506-02-b_firmware:rp2603
Fiberhome » An5506-04-B Firmware » Version: rp2510

cpe:2.3:o:fiberhome:an5506-04-b_firmware:rp2510
Fiberhome » An5506-04-F Firmware » Version: rp2617

cpe:2.3:o:fiberhome:an5506-04-f_firmware:rp2617

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42912

Products

Pricing

Contact Us