Vulnerabilities

TI-2026-33213 CVE-2026-45433 · GHSA-5h68-jg5g-w367

Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models

MEDIUM 44

This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00344 Published 2026-06-04 No fix listed CWE-321

TI-2026-33212 CVE-2026-45432 · GHSA-4jr5-8v5x-7499

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

MEDIUM 43

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00244 Published 2026-06-04 No fix listed CWE-319

TI-2026-33211 CVE-2026-45431 · GHSA-9m7w-vp93-x7hq

Command Injection Vulnerability in GX Earth ONT Models

MEDIUM 40

This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00388 Published 2026-06-04 No fix listed CWE-78

Vulnerabilities

Filters

Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

Command Injection Vulnerability in GX Earth ONT Models