CVE-2026-45432CWE-319

Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models

High · published June 4, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

This vulnerability exists in GX Earth ONT models due to the transmission of user credentials in plaintext over HTTP in its web management interface. A remote attacker could exploit this vulnerability by intercepting network traffic to obtain sensitive authentication information, which could lead to unauthorized access to the targeted device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00411 · 34.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-06-04T12:07Z
EPSS history
Timeline
  • 04 JUN 12:07Z
    Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
    cvelistv5