Fiberhome

Fiberhome manufactures a focused line of broadband access and residential gateway devices, including the HG6245D and AN5506 product families, that serve as customer premises equipment in service provider networks. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and cluster around weakness classes endemic to embedded networking gear: hard-coded credentials, cleartext sensitive-data storage, cross-site scripting, authentication bypasses, and code-injection flaws that can grant direct device compromise or administrative access. The narrow product portfolio masks a significant attack surface, since these devices are widely distributed at the network edge and often remain in service with minimal firmware update cycles. Defenders should prioritize inventory and isolation of affected gateway devices, particularly those exposed to untrusted networks, and treat credential reset and management-interface restrictions as mandatory hardening steps. Live exploitation activity and severity counts are shown alongside this summary.