Skip to main content
CRITICAL

CVE-2021-27156

CVSS v3

9.8

CRITICAL

EPSS Score

15.0 %

exploit probability, as of 2026-09-25

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface.

Technical details

Published
2021-02-10

Frequently asked questions

What is CVE-2021-27156?

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface.

Is CVE-2021-27156 actively exploited?

Active exploitation of CVE-2021-27156 has not been confirmed. Its EPSS score was 15.0% on 2026-09-25, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2021-27156?

CVE-2021-27156 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2021-27156 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key