Calix · Calix Gigacenter 844E · CVE-2025-54084
Name of the Vulnerable Software and Affected Versions:
Calix GigaCenter ONT versions 844E
Calix GigaCenter ONT versions 844G
Calix GigaCenter ONT versions 844GE
Calix GigaCenter ONT versions 854GE
Description:
An OS Command Injection issue exists in Calix GigaCenter ONT (Quantenna SoC modules). Authenticated attackers possessing 'super' user credentials can execute arbitrary OS commands due to improper input validation, potentially leading to full system compromise.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.