hanianis/CVE-2025-63353

hanianis/CVE-2025-63353

GitHubGitHub
GitHubgithub.com
Releases0
A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-63353↗
9.8 CRITICAL—

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.