CVE-2025-54084: high-severity vulnerability in Calix GigaCenter ONT
Calix Gigacenter ONT - Command Injection
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.8%
exploitation probability
0.8%top 44% of all CVEs
observed exploitation
nono source reports it
OS Command ('OS Command Injection') vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Calix · GigaCenter ONTRelated CVEs — Calix GigaCenter ONT
In the same product, most dangerous first.
CVE-2025-7635HIGHCalix GigaCenter ONT - Unauthenticated TelnetEPSS 0.4%CVE-2025-53914HIGHCalix GigaCenter ONT (Broadcom SoC) - Excessive PrivilegesEPSS 0.2%CVE-2025-53913HIGHCalix GigaCenter ONT (Quantenna SoC) - Excessive PrivilegesEPSS 0.2%CVE-2025-54083MEDIUMCalix GigaCenter ONT firmware - Sensitive Information DisclosureEPSS 0.2%