CVE-2025-63353
CRITICAL 9.8EPSS 1.3%
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.
- CVSS v3.1 CNA
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.34% chance of exploitation in the next 30 days, 71st percentile
- Published
- 2025-11-12
- Updated
- 2025-11-13
Proof-of-concept exploits (4)
- 0xA1M/CVE-2025-633533★ · 2025-12-18
- Zvckster/CVE-2025-633530★ · 2026-05-26
- hanianis/CVE-2025-6335311★ · 2025-11-06
- r0otk3r/CVE-2025-633533★ · 2026-07-10