Remote Code Execution Vulnerability in GX Earth 2022 ONT Models
CVE-2026-45433

8.7HIGH

Key Information:

Vendor

Gx India

Status
Gx Earth 2022
Gx Earth 1010
Vendor
CVE Published:
4 June 2026

What is CVE-2026-45433?

This vulnerability in GX Earth 2022 ONT models arises from the presence of a hardcoded RSA private key embedded in the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key, enabling them to decrypt HTTPS traffic. This exposure increases the risk of Man-in-the-Middle (MITM) attacks, potentially compromising sensitive data transmitted to and from the affected devices. Ensuring the integrity of cryptographic keys is critical to safeguarding devices against unauthorized access and exploitation.

Affected Version(s)

GX Earth 1010 version E1010-1.1ASL

GX Earth 2022 version E2022 - 3.1.2A

GX Earth 2022 version E2022 - 3.1.5AV

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOT...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability is reported by Anmol Bakshi.
.