Back to the CVE list
CVE-2025-63353

Improper access control in Fiberhome Hg6145f1

CVSS score

9.8

EPSS probability

%1.3

Risk score

0.1

Published

11 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

This is a Proof-Of-Concept of CVE-2025-63353 (★1)

Public PoCSource updated: 19.12.2025 04:57:02

A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID (★0)

Public PoCSource updated: 07.11.2025 04:21:10

CVE-2025-63353 (★0)

Public PoCSource updated: 10.04.2026 05:40:17

Multi-language PoC (Python · Go · JS · C) and technical documentation for CVE-2025-63353, a critical predictable-default-PSK vulnerability in FiberHome HG6145F1 GPON ONT devices. (★0)

Public PoCSource updated: 26.05.2026 08:55:25

https://medium.com/@hanianis.bouzid/fiberhome-gpon-onu-model-hg6145f1-router-predictable-wifi-passwords-and-real-risks-d8e54da385d3

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-63353"