VULNERABILITY INTELLIGENCE
CVE-2026-45433
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
Description
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.
Weakness classification
- vdisclose@cert-in.org.in: CWE-321