CVE-2025-63353
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 1.3%
from disclosure to weapon0 days
Published on NVDNov 12
1st PoCNov 4
exploitation probability
1.3%top 32% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/hanianis/CVE-2025-63353★ 8githubgithub.com/0xA1M/CVE-2025-63353★ 4githubgithub.com/r0otk3r/CVE-2025-63353★ 2githubgithub.com/Zvckster/CVE-2025-63353★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.