CVE Feed

    Dashboard / CVE / CVE-2025-63353

    CVE-2025-63353

    A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.

    Published:Nov 12, 2025
    Last Modified:Dec 31, 2025
    EPS:Nov 12, 2025
    EPSS Score:0.00108
    CVSS Score:9.8

    Affected Products

    Vendor
    Fiberhome
    Product
    Hg6145f1
    Vendor
    Fiberhome
    Product
    Hg6145f1 Firmware
    Vendor
    Fiberhome
    Product
    Rp4423

    Exploits

    https://medium.com/@hanianis.bouzid/fiberhome-gpon-onu-model-hg6145f1-router-predictable-wifi-passwords-and-real-risks-d8e54da385d3https://github.com/0xA1M/CVE-2025-63353https://github.com/hanianis/CVE-2025-63353https://github.com/r0otk3r/CVE-2025-63353https://github.com/Zvckster/CVE-2025-63353

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High