CVE-2026-45432
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
This vulnerability in GX Earth ONT models transmits user credentials in plaintext over HTTP in the web management interface. A remote attacker can intercept network traffic to obtain sensitive authentication information, leading to unauthorized access to the device.
Risk Assessment
An attacker can gain access to the device and potentially take control, compromising network security.
Recommendation
Configure the device to use encrypted HTTPS for the management interface and change default credentials.
Other vulnerabilities in GX Earth ONT
Original NVD description (English source)
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.