745 matches found
CVE-2025-63353
CVE-2025-63353 fiberhome GPON ONU HG6145F1 RP4423 中的一个漏洞允许从 SSID 预测设备的出厂默认 Wi-Fi 密码（WPA/WPA2 预共享密钥）。...
FiberHome Routers - Local File Inclusion
FiberHome routers are susceptible to local file inclusion in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. id: CVE-2017-15647 info: name: FiberHome Routers - Local File Inclusion author: daffainfo severity: high description: FiberHome routers are...
CVE-2025-63353
CVE-2025-63353 PoC - FiberHome HG6145F1 可预测的默认 Wi-Fi PSK 面向 CVE-2025-63353 的教育性研究工具包和多语言 PoC，这是一个影响 FiberHome HG6145F1 RP4423 GPON ONT 设备的严重可预测默认 PSK 漏洞。 摘要 受影响的 FiberHome HG6145F1 设备上的出厂默认 Wi-Fi 预共享密钥是广播 SSID 的确定性函数。攻击者只要观察到来自易受害设备的信标帧，就能在恒定时间内推导出 WPA2 PSK，无需捕获握手包、无需字典、无需 GPU，也无需与客户端交互。 对于广播 SSI...
CVE-2025-63353
FiberHome Wi-Fi 密码预测器 CVE-2025-63353 一个用于安全审计和概念验证演示的 Python 工具，针对 FiberHome HG6145F1 RP4423 路由器中发现的确定性密码生成缺陷。 📋 概述 该脚本利用 CVE-2025-63353，这是一个严重漏洞，其中出厂默认的 WPA/WPA2 预共享密钥由广播的 SSID 数学推导而来。攻击者只需观察网络名称 SSID，即可在无需任何用户交互的情况下计算出默认密码。 漏洞逻辑： 路由器使用一个确定性公式：HEXA（来自 SSID）+ HEXB（来自密码）= 0xFFFFFF。 🌍 全球影响 FiberHom...
CVE-2025-63353
CVE-2025-63353：FiberHome GPON ONT设备中的可预测Wi-Fi密码漏洞 参考文献 基于Hanianis的研究（原始CVE披露地址：CVE-2025-63353） 感谢识别此漏洞的安全研究人员。 法律免责声明 此信息仅用于教育和安全研究目的。用户有责任遵守所有适用的地方法律、州法律和联邦法律。作者对因使用或滥用此信息而产生的任何损害不承担任何责任。 摘要 在FiberHome GPON ONU HG6145F1...
Exploit for Improper Access Control in Fiberhome Hg6145F1_Firmware
CVE-2025-63353 PoC - FiberHome HG6145F1 Predictable Default Wi...
Exploit for Improper Access Control in Fiberhome Hg6145F1_Firmware
FiberHome Wi-Fi Password Predictor CVE-2025-63353 A Python...
CVE-2021-27139
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp...
CVE-2021-27140
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs...
CVE-2021-27142
An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions...
CVE-2021-27146
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP...
CVE-2021-27148
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP...
CVE-2021-27155
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh2VemEfUtesEchEC2d2e credentials for an ISP...
CVE-2021-27151
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP...
CVE-2021-27164
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP...
CVE-2021-27157
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 888888 credentials for an ISP...
CVE-2021-27166
An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon...
CVE-2021-27160
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP...