Insecure Storage of Sensitive Information in Calix GigaCenter ONT Products
CVE-2025-54083

5.1MEDIUM

Key Information:

Vendor

Calix

Status
Gigacenter Ont
Vendor
CVE Published:
9 September 2025

What is CVE-2025-54083?

The vulnerability resides within the Calix GigaCenter ONT products, specifically affecting models with Quantenna SoC modules. An improper handling of sensitive information allows unauthorized administrative access to the web interface. This could lead to exposure and manipulation of critical data as well as further exploitation of the affected devices.

Affected Version(s)

GigaCenter ONT 844E

GigaCenter ONT 844G

GigaCenter ONT 844GE

References

https://fluidattacks.com/advisories/rocola
third-party-advisory
https://www.calix.com
relatedproduct

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54083 : Insecure Storage of Sensitive Information in Calix GigaCenter ONT Products