CVE-2025-63353

CVE-2025-63353 fiberhome GPON ONU HG6145F1 RP4423 における脆弱性により、デバイスの 工場出荷時のデフォルトWi-Fiパスワード（WPA/WPA2事前共有キー）がSSIDから予測可能になります。...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 予測可能なデフォルトWi-Fi PSK 教育用研究ツールキットおよび多言語PoCです。CVE-2025-63353 は、FiberHome HG6145F1 RP4423 GPON ONT デバイスに影響を与える重大な予測可能なデフォルトPSK脆弱性です。 概要 影響を受けるFiberHome...

CVE-2026-5039

CVE-2026-5039 affects TP-Link TL-WR841N v13. The issue stems from using DES-CBC encryption in the TDDPv2 debug protocol, with a cryptographic key derived from the device’s default web management credentials. This makes the key predictable when the device remains in its default configuration. A ne...

CVE-2026-1675: Initialization of a Resource with an Insecure Default

The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...

CVE-2025-13955: Use of Insufficiently Random Values

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

CVE-2024-23726

Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...

CVE-2024-23726

The CVE-2024-23726 entry concerns Ubee DDW365/XCNDDW365 devices with predictable default WPA2 PSKs that enable nearby attackers to derive the PSK by observing beacon frames. The PSK is generated from the first six characters of the SSID and the last six of the BSSID, decrementing the last digit, ...

CVE-2024-23726

Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and...

CVE-2023-40038

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit...