CVE-2026-45431highCWE-78

CVE-2026-45431: falha de alta gravidade em GX Earth 1010

Command Injection Vulnerability in GX Earth ONT Models

Publicada em

Seguir esta CVE+ Monitorar GX Earth

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.4%
This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
GX INDIA · GX Earth 1010GX INDIA · GX Earth 2022
CVEs relacionadas — GX Earth 1010

No mesmo produto, das mais perigosas para as menos.

CVE-2026-45433HIGHHardcoded Cryptographic Key Vulnerability in GX Earth ONT ModelsEPSS 0.3%CVE-2026-45432HIGHCleartext Transmission of Credentials Vulnerability in GX Earth ONT ModelsEPSS 0.2%