Command Injection Vulnerability in GX Earth ONT Models
CVE-2026-45431

8.7HIGH

Key Information:

Vendor

Gx India

Status
Gx Earth 2022
Gx Earth 1010
Vendor
CVE Published:
4 June 2026

What is CVE-2026-45431?

This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device.

Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.

Affected Version(s)

GX Earth 1010 version E1010-1.1ASL

GX Earth 2022 version E2022 - 3.1.2A

GX Earth 2022 version E2022 - 3.1.5AV

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Anmol Bakshi.
.