CVE-2026-45431

HighCVSS 8.7

Published: 04/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

This vulnerability in GX Earth ONT models is due to improper handling of user-supplied input in diagnostic functions of the web management interface. An authenticated remote attacker can inject and execute arbitrary OS commands on the device.

Risk Assessment

Successful exploitation allows remote code execution with root privileges, potentially leading to full device compromise.

Recommendation

Immediately update the firmware of GX Earth ONT models to the latest version and restrict access to the management interface to trusted networks only.

Other vulnerabilities in GX Earth ONT

CVE-2026-45432High
This vulnerability in GX Earth ONT models transmits user credentials in plaintext over HTTP in the web management interface. A remote attacker can intercept network traffic to obtain sensitive authentication information, leading to unauthorized access to the device.

Original NVD description (English source)

This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.