Description
This vulnerability exists in GX Earth 2022 ONT models due to the presence of hardcoded RSA private key within the device firmware. A remote attacker could exploit this vulnerability by extracting the cryptographic private key from the firmware, which could lead to decryption of HTTPS traffic and Man-in-the-Middle (MITM) attacks on the targeted device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GX INDIA | GX Earth 2022 | version E2022 - 3.1.2A, version E2022 - 3.1.5AV, version E2022 - 1.1ASL | — |
| GX INDIA | GX Earth 1010 | version E1010-1.1ASL | — |
References
- https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0288 third-party-advisory