CVE-2025-54083
5.1
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Summary
Insecure Storage of Sensitive Information vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows admin access to the web interface.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Calix | GigaCenter ONT | 844E | affected |
| Calix | GigaCenter ONT | 844G | affected |
| Calix | GigaCenter ONT | 844GE | affected |
| Calix | GigaCenter ONT | 854GE | affected |
Weaknesses
- CWE-922: CWE-922 Insecure Storage of Sensitive Information
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: no
- Technical Impact: partial
Additional References
References
- https://fluidattacks.com/advisories/rocola
- https://www.calix.com
- https://revers3everything.com/calix-case-five-0-days-five-cves/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.