← Database

CVE-2021-42912

HIGH CVSS: 8.8 Published: 2021-12-16 Modified: 2026-07-09

Description

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.

Affected Platforms

Fiberhome An5506-01-BFiberhome An5506-01-AFiberhome Aan5506-04-G2G FirmwareFiberhome An5506-04-BFiberhome An5506-02-BFiberhome An5506-01-B FirmwareFiberhome An5506-01-A FirmwareFiberhome An5506-02-B FirmwareFiberhome An5506-04-B FirmwareFiberhome An5506-04-G2G

Weakness Type

CWE-78

References