CVE-2021-42912 - CVE House
Back to Database
Status published High CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS...

Vulnerability Description

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42912

Credits & Attribution

No credits recorded in the NVD database.

References

More from fiberhome

View All →
CVE-2022-38814
A stored cross-site scripting (XSS) vulnerability in the auth_settings component...
Medium 5.4
CVE-2022-36200
In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted...
High 7.5
CVE-2021-41946
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS)...
Medium 5.4
CVE-2021-27179
An issue was discovered on FiberHome HG6245D devices through RP2613....
High 7.5
CVE-2021-27178
An issue was discovered on FiberHome HG6245D devices through RP2613....
High 7.5

Affected Vendor

Affected Software

an5506-01-a firmware, an5506-01-b firmware, an5506-02-b firmware, an5506-04-b firmware, an5506-04-f firmware, aan5506-04-g2g firmware
Vulnerable Versions:
rp0509, rp2610, rp2520, rp2521, rp2603, rp2510, rp2617, rp2560

Timeline

Official Publish: December 16th, 2021
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.