CVE-2022-40055
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page. The lack of rate limiting or account lockout mechanisms enables repeated password guessing.
Risk Assessment
An attacker can gain unauthorized administrative access to the device, leading to full control over the GPON network and potential compromise of data confidentiality and integrity.
Recommendation
Immediately update the device firmware to the latest version and implement account lockout policies after a defined number of failed login attempts.
Original NVD description (English source)
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login page.