CVE-2025-63353

CVE-2025-63353: FiberHome GPON ONT 장치에서의 예측 가능한 Wi-Fi 비밀번호 취약점 참고 자료 Hanianis의 연구 기반 원본 CVE 공개: CVE-2025-63353 이 취약점을 식별한 보안 연구자들에게 감사드립니다. 법적 고지 이 정보는 교육 및 보안 연구 목적으로만 제공됩니다. 사용자는 모든 해당 지역, 주, 연방 법률을 준수할 책임이 있습니다. 저자는 이 정보의 사용 또는 오용으로 인해 발생하는 어떠한 손해에 대해서도 책임을 지지 않습니다. 요약 FiberHome GPON ONU...

CVE-2025-63353

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...

CVE-2025-63353: Improper Access Control

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...

CVE-2025-29525

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

CVE-2025-29524

Incorrect access control in the component /cgi-bin/systemdiagnosticmain.asp of DASAN GPON ONU H660WM H660WMR210825 allows attackers to access sensitive information...

CVE-2025-29525: Use of Default Credentials

DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel...

CVE-2025-44178: Improper Access Control

DASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default settings. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information and modify its configuration via the UPnP protocol WAN sides without any authentication...

CVE-2025-29524: Improper Access Control

Incorrect access control in the component /cgi-bin/systemdiagnosticmain.asp of DASAN GPON ONU H660WM H660WMR210825 allows attackers to access sensitive information...

Command Execution Vulnerability in HG6145D at Wuhan Fiberhome Information Integration Technology Co.

HG6145D is a Gigabit Passive Fiber Optic Access User Unit GPON ONU of Fiberhome Communication Technology Co. A command execution vulnerability exists in the HG6145D of Wuhan Fiberhome Information Integration Technology Co. that can be exploited by an attacker to gain control of the server...

Raisecom Technology GPON-ONU HT803G-07 Command Injection Vulnerability

Raisecom Technology is a supplier of access equipment, solutions and services. A command injection vulnerability exists in the 'fmgponloid' parameter in the Raisecom Technology GPON-ONU HT803G-07. An attacker could exploit this vulnerability to execute code...

Raisecom Technology GPON-ONU HT803G-07 Command Injection (1)

Raisecom Technology GPON-ONU HT803G-07 suffers from an authenticated command injection vulnerability in the fmgponloid parameter. Raisecom Technology GPON-ONU HT803G-07 Command Injection 1 ===================================== Authenticated Shell Command Injection...

Raisecom Technology GPON-ONU HT803G-07 Command Injection

===================================== Authenticated Shell Command Injection ===================================== . contents:: Table Of Content Overview ======== Title:- Authenticated Shell command Injection Author: Kaustubh G. Padwad CVE ID: CVE-2019-7384. Vendor: Raisecom technology co.,LTD...

Raisecom Technology GPON-ONU HT803G-07 Command Injection (2)

Raisecom Technology GPON-ONU HT803G-07 suffers from an authenticated command injection vulnerability in the newpass and confpass parameters in /bin/WebMGR. Raisecom Technology GPON-ONU HT803G-07 Command Injection 2 ===================================== Authenticated Shell Command Injection...

Raisecom Technology GPON-ONU HT803G-07 Command Injection

===================================== Authenticated Shell Command Injection ===================================== . contents:: Table Of Content Overview ======== Title:- Authenticated Shell command Injection Author: Kaustubh G. Padwad Vendor: Raisecom technology co.,LTD Product: GPON-ONU HT803G-0...