FiberHome HG6145F1: Predictable Default Wi-Fi PSK (CVE-2025-63353)
FiberHome HG6145F1 devices running firmware rp4423 utilize a deterministic algorithm to generate Wi-Fi pre-shared keys from broadcast SSIDs, allowing an attacker to derive the network password.
CVE search metadata
CVE search record: CVE-2025-63353. Severity: critical. CVSS: 9.8. EPSS: 1.33%. KEV: no. Product: FiberHome HG6145F1 (firmware rp4423). Brief: FiberHome HG6145F1: Predictable Default Wi-Fi PSK (CVE-2025-63353). Brief link: https://feed.craftedsignal.io/briefs/2026-10-fiberhome-psk-vulnerability/
Triage facts
Revision 1- Applicability
- FiberHome HG6145F1 (firmware rp4423)
- Evidence
- Unknown
- Severity
- High
- Sources
- 4 public sources
- Freshness
- Revision 1Oct 29, 20:18 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- C3Roughly even chance
FiberHome HG6145F1 devices with firmware version rp4423 are affected by a vulnerability (CVE-2025-63353) where the factory default Wi-Fi pre-shared key is a deterministic function of the broadcast SSID. An attacker can derive the PSK for a device by observing its broadcasted SSID.