PT-2026-46195 · Gx India · Gx Earth 1010+1

Anmol Bakshi · Publicado 2026-06-04 · Atualizado 2026-06-04 · CVE-2026-45432

Mitre

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2026-45432

Produtos afetados

Gx Earth 1010

Gx Earth 2022

Referências · 2

• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0288 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-45432 · Nota de Segurança