PT-2025-36956 · Calix · Gigacenter Ont 844E+3

Danilo Erazo · CVE-2025-7635 · Published 2025-09-09 · Updated 2025-12-22

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Calix GigaCenter ONT versions 844E Calix GigaCenter ONT versions 844G Calix GigaCenter ONT versions 844GE Calix GigaCenter ONT versions 854GE

Description: An unauthenticated Telnet access issue exists in Calix GigaCenter ONT, allowing root access.

Recommendations: Disable Telnet access on Calix GigaCenter ONT version 844E. Disable Telnet access on Calix GigaCenter ONT version 844G. Disable Telnet access on Calix GigaCenter ONT version 844GE. Disable Telnet access on Calix GigaCenter ONT version 854GE.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-7635

Affected Products

Gigacenter Ont 844E

Gigacenter Ont 844G

Gigacenter Ont 844Ge

Gigacenter Ont 854Ge

References · 10

• 🔥 https://fluidattacks.com/advisories/sal · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7635 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7635 · Vendor Advisory
• https://twitter.com/fluidattacks/status/1983300493590794319 · Twitter Post
• https://t.me/cveNotify/135253 · Telegram Post
• https://twitter.com/CVEnew/status/1965509593930559549 · Twitter Post
• https://twitter.com/fluidattacks/status/1998509207629480236 · Twitter Post
• https://t.me/cveNotify/146603 · Telegram Post
• https://calix.com · Note
• https://revers3everything.com/calix-case-five-0-days-five-cves · Note