CVE-2026-45433CWE-321

Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models

High · published June 4, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00473 · 39.9th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-06-04T12:13Z
EPSS history
Timeline
  • 04 JUN 12:13Z
    Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models
    cvelistv5