PT-2025-46670 · Fiberhome · Fiberhome Gpon Onu Hg6145F1 Rp4423

Published 2025-11-12 · Updated 2026-04-09 · CVE-2025-63353

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FiberHome GPON ONU HG6145F1 RP4423

Description A flaw exists in FiberHome GPON ONU HG6145F1 RP4423 that allows prediction of the device’s factory default Wi-Fi password (WPA/WPA2 pre-shared key) from the SSID. The device uses a predictable algorithm to generate default passwords based on the SSID, enabling an attacker observing the SSID to determine the default password without needing authentication or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-63353

Affected Products

Fiberhome Gpon Onu Hg6145F1 Rp4423

References · 9

• 🔥 https://github.com/hanianis/CVE-2025-63353 · Exploit
• 🔥 https://medium.com/@hanianis.bouzid/fiberhome-gpon-onu-model-hg6145f1-router-predictable-wifi-passwords-and-real-risks-d8e54da385d3 · Exploit
• https://osv.dev/vulnerability/CVE-2025-63353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-63353 · Security Note
• https://t.me/cveNotify/147340 · Telegram Post
• https://twitter.com/CVEnew/status/1988820462089171163 · Twitter Post
• https://twitter.com/r0otk3r/status/2042344731577864361 · Twitter Post
• https://t.me/CVEtracker/37144 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988731327529505170 · Twitter Post