Is CVE-2025-63353 actively exploited?

No active exploitation of CVE-2025-63353 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-63353 be exploited remotely?

Yes. CVE-2025-63353 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2025-63353?

CVE-2025-63353 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2025-63353

CRITICAL

CVE-2025-63353

CWE-284Published: November 12, 2025· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.

NVD Source

Risk Analysis

This critical vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows an attacker to predict the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) from the SSID. With a CVSS score of 9.8, this flaw is highly severe and could lead to unauthorized network access. The absence of an EPSS score and KEV listing means there is no current data to indicate active exploitation, but the high CVSS score warrants immediate attention.

No public exploit is currently known for this vulnerability. It is remotely exploitable with low attack complexity, meaning an attacker could exploit it over a network without needing complex techniques.

Recommended Action

Users of FiberHome GPON ONU HG6145F1 RP4423 should change the default Wi-Fi password immediately. Ensure all network devices use strong, unique passwords that are not easily predictable.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2025-63353 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.