CVE-2026-45432 — Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

CVE-2026-45432

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models PUBLISHED

Description (CNA)

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.

Affected (CNA)

Vendor / product	Versions
GX INDIA / GX Earth 2022	affected version E2022 - 3.1.2A; affected version E2022 - 3.1.5AV; affected version E2022 - 1.1ASL
GX INDIA / GX Earth 1010	affected version E1010-1.1ASL

CWE

CWE-319

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0288

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.