CVE-2025-63353

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the…

Critical · published November 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

🚨 A factory default Wi-Fi password that’s as predictable as your favorite pizza topping? That's exactly the risk with the FiberHome GPON ONU HG6145F1 RP4423! 🔥 Think of this vulnerability like a restaurant that always uses the same secret sauce for every dish—if you know the name of the restaurant (the SSID), you can easily guess the flavor (the password) without ever stepping inside! If an attacker catches sight of your SSID, they can predict the default Wi-Fi password without breaking a sweat. This means they could easily join your network, access your data, and potentially wreak havoc—yes, we're talking about a full-on invasion of privacy and security!

Put simply

Think of this vulnerability like a restaurant that always uses the same secret sauce for every dish—if you know the name of the restaurant (the SSID), you can easily guess the flavor (the password) without ever stepping inside! This vulnerability allows the default Wi-Fi password to be derived from the SSID using a deterministic algorithm, making it easy for attackers to guess without needing authentication or user interaction.

What to do

If an attacker catches sight of your SSID, they can predict the default Wi-Fi password without breaking a sweat. This means they could easily join your network, access your data, and potentially wreak havoc—yes, we're talking about a full-on invasion of privacy and security! To safeguard your network, change the factory default password immediately! It's also wise to update your router's firmware to the latest version and consider disabling the SSID broadcast to add another layer of security. 🛡️ You've got this! By taking these steps, you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01326 · 70.7th percentile
Published
2025-11-12T00:00Z
EPSS history
Timeline
  • 12 NOV 00:00Z
    A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the…
    cvelistv5