CVE-2025-63353

The device in firmware version RP4423 applies a deterministic algorithm to generate the default Wi-Fi password (WPA/WPA2 PSK) directly based on the SSID value broadcast by the router. An attacker who can read the network SSID (e.g., through passive Wi-Fi scanning) is able to reproduce the password without any access to the device or user interaction. The lack of randomness in the password generation process makes the factory default configuration predictable for every device of this model.

An attacker can gain unauthorized access to the Wi-Fi network protected by a default password, which opens the way to eavesdropping on network traffic, lateral movement in the local network, and potential takeover of connected devices.

The default Wi-Fi password should be immediately changed to a strong, random password unique to the device. Patches available from the manufacturer should be applied according to references or contact the internet service provider to update the firmware. Until the patch is deployed, it is also recommended to disable SSID broadcasting as a measure to reduce exposure.

FiberHome GPON ONU HG6145F1 with firmware version RP4423