What’s Vulnerable › Vulnerabilities
CVE-2026-45433: Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models
- Severity: high (CVSS 8.7 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-04 · updated 2026-07-22
- Weakness: CWE-321
Description
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.
Affected products
- GX INDIA GX Earth 1010: version E1010-1.1ASL
- GX INDIA GX Earth 2022: from version E2022 through 3.1.2A; from version E2022 through 3.1.5AV; from version E2022 through 1.1ASL
References
Get alerted when CVE-2026-45433 or the next vulnerability affects your stack