Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
CVE-2026-45432

8.7HIGH

Key Information:

Vendor

Gx India

Status
Gx Earth 2022
Gx Earth 1010
Vendor
CVE Published:
4 June 2026

What is CVE-2026-45432?

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.

Affected Version(s)

GX Earth 1010 version E1010-1.1ASL

GX Earth 2022 version E2022 - 3.1.2A

GX Earth 2022 version E2022 - 3.1.5AV

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Anmol Bakshi.
.