CVE-2026-45432

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

State: Published
Severity: 8.7 High
Published: Jun 4, 2026
Updated: Jun 4, 2026
Reserved: May 12, 2026

Description

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	CERT-In

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
GX Earth 2022GX INDIA	version E2022 - 3.1.2AAffected version E2022 - 3.1.5AVAffected version E2022 - 1.1ASLAffected
GX Earth 1010GX INDIA	version E1010-1.1ASLAffected

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0288third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.