Approved changes feed: RSS · Atom

cpe:2.3:a:gx_india:gx_earth_2022:version_e2022_-_3.1.5av:*:*:*:*:*:*:*

part: a version: version_e2022_-_3.1.5av update: *

VendorGx India (daa4dd05-35da-590a-8cca-f09a524a5129)
ProductGx Earth 2022 (58c2e79e-05c8-5855-b062-7fc6fa5e6e2b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-45433 vulnerable 2026-06-08 08:05:11.755857 Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.
Published: 2026-06-04T12:13:41.901Z
Updated: 2026-06-04T13:47:51.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45432 vulnerable 2026-06-08 08:05:11.755126 Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.
Published: 2026-06-04T12:07:31.670Z
Updated: 2026-06-04T13:22:25.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45431 vulnerable 2026-06-08 08:05:11.752536 Command Injection Vulnerability in GX Earth ONT Models
This vulnerability exists in GX Earth ONT models due to improper handling of user-supplied input in multiple diagnostic functions in its web management interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary and executing OS commands on the targeted device. Successful exploitation of this vulnerability could allow the attacker to perform remote code execution with root privileges on the targeted device.
Published: 2026-06-04T12:04:09.597Z
Updated: 2026-06-04T13:25:09.892Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.