PT-2022-25179 · Gx · Gx Group Gpon Ont Titanium 2122A

Published 2022-10-17 · Updated 2022-10-20 · CVE-2022-40055

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GX Group GPON ONT Titanium 2122A version T2122-V1.26EXL

Description The issue allows attackers to escalate privileges via a brute force attack at the "login page".

Recommendations For version T2122-V1.26EXL, as a temporary workaround, consider restricting access to the login page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-40055

Affected Products

Gx Group Gpon Ont Titanium 2122A

References · 6

• https://osv.dev/vulnerability/CVE-2022-40055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40055 · Security Note
• http://gpon.com · Note
• https://t.me/cibsecurity/51621 · Telegram Post
• http://gx.com · Note
• https://blog.alphathreat.in/index.php?post/2022/10/01/Achieving-CVE-2022-40055 · Note