A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects an unknown part of the component WiFi Password Handler. The manipulation with an unknown input leads to a weak credentials vulnerability. Using CWE to declare the problem leads to CWE-1391. The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker. Impacted is confidentiality.

The advisory is shared at packetstorm.news. The identification of this vulnerability is CVE-2025-1081. The exploitation is known to be difficult. The attack needs to be done within the local network. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available.

The exploit is available at packetstorm.news. It is declared as proof-of-concept. The vendor was contacted early about this disclosure but did not respond in any way.

It is possible to mitigate the problem by applying the configuration setting .

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Bharti Airtel

Name

• Xstream Fiber

Version

• 20250123

License

• open-source

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #488582: Bharti Airtel Airtel Xstream Fiber WiFi N/A Brute force attack (by alokkumar0200)

Discussion