Vulnerability in Gx India Earth 1010
CVE-2026-45433
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.
Published · last modified .
EPSS exploit prediction
EPSS: 0.005 (38.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 38.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.005 · change: +0.001
Affected products
- Gx India Earth 1010 — versions version E1010-1.1ASL
- Gx India Earth 2022 — versions version E2022 - 3.1.2A, version E2022 - 3.1.5AV, version E2022 - 1.1ASL
Weakness classification (CWE)
References
- www.cert-in.org.in/s2cMainServlet (third-party-advisory)