Description

FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service ('webs') fails to enforce maximum lengths for Cookie header values. When a cookie longer than 511 bytes is processed, a stack buffer is overrun, leading to a crash or potential control of execution flow.

INFO

Published Date :

2025-11-12T22:09:20.835Z

Last Modified :

2025-11-13T14:35:47.050Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2021-4464 vulnerability.

Vendors Products
Fiberhome
  • An5506-04-fa
  • Hg6245d
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2021-4464.

URL Resource
https://pierrekim.github.io/advisories/2021-fiberhome-0x00-ont.txt cve-icon cve-icon
https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#misc-remote-stack-overflow-an5506 cve-icon cve-icon
https://www.vulncheck.com/advisories/fiberhome-routers-remote-stack-overflow cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability