CVE-2025-63353

CVE-2025-63353: Predictable Wi-Fi Password Vulnerability in FiberHome GPON ONT Devices References Based on research by Hanianis original CVE disclosure at CVE-2025-63353 Thanks to the security researchers who identified this vulnerability. Legal Disclaimer This information is provided for...

CVE-2025-63353

CVE-2025-63353 A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID...

CVE-2025-63353: Improper Access Control

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...

PT-2020-9398

Name of the Vulnerable Software and Affected Versions: NETGEAR CG3700b custom firmware version V2.02.03 Description: The issue concerns the use of the same default 8 character passphrase for both the administrative console and the WPA2 pre-shared key. This could be exploited through attacks again...

CVE-2019-13393: Initialization of a Resource with an Insecure Default

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase...

PT-2013-5342

Name of the Vulnerable Software and Affected Versions HOT HOTBOX router version 2.1.11 Description The issue concerns a default WPS PIN that can be exploited by remote attackers to obtain the WPA or WPA2 pre-shared key via EAP messages, making it easier for them to gain unauthorized access...